[Users] Oauth2 not working with Microsoft Exchange

[Paul Rolland]

Hello,

So, MFA was a good information, as I now have a new message when clicking on
the "Authorize" button :

{"error":"invalid_grant","error_description":"AADSTS54005: OAuth2 Authorization code was already redeemed, please retry with a new valid code or use an existing refresh token....

Could that be related to :
https://learn.microsoft.com/en-us/azure/active-directory/develop/reference-breaking-changes#authorization-codes-can-no-longer-be-reused
(1st Google answer with the error code ;)

Unfortunately, my knowledge of the inner working of OAuth2 and MS API are
far from allowing me to understand what's *really* wrong and what to do.

But if someone in the audience is ready to share some details, I can try to
go farther:
 - I'm recompiling my own Claws-mail (so I can adapt/patch code),
 - I'm full admin on the MS tenant I want to work with.
That gives a lot of possibilities ;)

Best,
Paul 

-- 
Paul Rolland                                E-Mail : rol(at)witbe.net
CTO - Witbe.net SA                          Tel. +33 (0)1 47 67 77 77
18 Rue d'Arras, Bat. A11                    Fax. +33 (0)1 47 67 77 99
F-92000 Nanterre                            RIPE : PR12-RIPE

Please no HTML, I'm not a browser - Pas d'HTML, je ne suis pas un
navigateur "Some people dream of success... while others wake up and work
hard at it" 

"I worry about my child and the Internet all the time, even though she's
too young to have logged on yet. Here's what I worry about. I worry that 10
or 15 years from now, she will come to me and say 'Daddy, where were you
when they took freedom of the press away from the Internet?'"
--Mike Godwin, Electronic Frontier Foundation 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 659 bytes
Desc: OpenPGP digital signature
URL: <http://lists.claws-mail.org/pipermail/users/attachments/20221012/b665b577/attachment.sig>