Access_token before id_token


in the xxxx-auth.service.ts I see the following line:

const token = params.get(‘id_token’) || params.get(‘access_token’);

I think it should be:

const token = params.get(‘access_token’) || params.get(‘id_token’)

When both are requested, the access_token is the right bearer token to get access to the resource (e.g msgraph)

nb: see also topic “Authentication url is missing resource parameter”, it was in this experiment that I changed the auth uri and requested the access_token and id_token in one request


Hi Bart,

Yep, this is correct. We should change the order.