Experiencing Issues with MSAL Config due to Client Secret Value?

Question

Hi All,

I'm reaching out in regards to the error code I've been receiving for my app that doesn't quite make sense as it's been working properly until during and after last Friday's outage.

In my application, I've received the following:

errorCode: 'invalid_client',

errorMessage: "Error(s): 7000215 - Timestamp: 2025-01-13 16:04:34Z - Description: AADSTS7000215: Invalid client secret provided. Ensure the secret being sent in the request is the client secret value, not the client secret ID, for a secret added to app '

Answer 1

This has been resolved - when these values are in the .env config with double quotation marks e.g. "<client-value>" instead of <client-value>, it reads it incorrectly.

I was able to check the tokenResponse and it passed in '"<client-secret>"' for the msalConfig instead of "<client-secret>"