mirror of https://github.com/openclaw/openclaw.git
This fixes the msteams probe which otherwise incorrectly assumes teams is not working. The @microsoft/agents-hosting SDK's MsalTokenProvider automatically appends /.default to all scope strings in its token acquisition methods (acquireAccessTokenViaSecret, acquireAccessTokenViaFIC, acquireAccessTokenViaWID, acquireTokenWithCertificate in msalTokenProvider.ts). This is consistent SDK behavior, not a recent change. The current code is including .default in scope URLs, resulting in invalid double suffixes like https://graph.microsoft.com/.default/.default. I am not sure how the .default postfixed worked in the past for you if I am honest. This was confirmed to cause Graph API authentication errors. Removing the .default suffix from our scope strings allows the SDK to append it correctly, resolving the issue. I confirmed it manually on my teams setup Before: we pass .default -> SDK appends -> double .default (broken) After: we pass base URL -> SDK appends -> single .default (works) Co-authored-by: Christof Salis <c.salis@vertifymed.com> |
||
|---|---|---|
| .. | ||
| bluebubbles | ||
| copilot-proxy | ||
| diagnostics-otel | ||
| discord | ||
| google-antigravity-auth | ||
| google-gemini-cli-auth | ||
| imessage | ||
| llm-task | ||
| lobster | ||
| matrix | ||
| mattermost | ||
| memory-core | ||
| memory-lancedb | ||
| msteams | ||
| nextcloud-talk | ||
| nostr | ||
| open-prose | ||
| qwen-portal-auth | ||
| signal | ||
| slack | ||
| telegram | ||
| tlon | ||
| voice-call | ||
| zalo | ||
| zalouser | ||