mirror of https://github.com/openclaw/openclaw.git
ef777d6bb6
The @microsoft/agents-hosting SDK's MsalTokenProvider automatically appends `/.default` to all scope strings in its token acquisition methods (acquireAccessTokenViaSecret, acquireAccessTokenViaFIC, acquireAccessTokenViaWID, acquireTokenWithCertificate in msalTokenProvider.ts). This is consistent SDK behavior, not a recent change. Our code was including `.default` in scope URLs, resulting in invalid double suffixes like `https://graph.microsoft.com/.default/.default`. This was confirmed to cause Graph API authentication errors. Removing the `.default` suffix from our scope strings allows the SDK to append it correctly, resolving the issue. Before: we pass `.default` -> SDK appends -> double `.default` (broken) After: we pass base URL -> SDK appends -> single `.default` (works) Co-authored-by: Christof Salis <c.salis@vertifymed.com> |
||
|---|---|---|
| .. | ||
| bluebubbles | ||
| copilot-proxy | ||
| diagnostics-otel | ||
| discord | ||
| google-antigravity-auth | ||
| google-gemini-cli-auth | ||
| imessage | ||
| lobster | ||
| matrix | ||
| mattermost | ||
| memory-core | ||
| memory-lancedb | ||
| msteams | ||
| nextcloud-talk | ||
| nostr | ||
| open-prose | ||
| qwen-portal-auth | ||
| signal | ||
| slack | ||
| telegram | ||
| voice-call | ||
| zalo | ||
| zalouser | ||