AADSTS9002325: Proof Key for Code Exchange is required for cross-origin authorization code redemption

user14504804

26 May 2025, 17:02 UTC

83.2K views1

I created a spa application owned by my organization only, but there was a problem when I requested code. How can I resolve it?

azure single-sign-on azure-active-directory

1,490 following

1 answer

Accepted answer · original discussion

Carl Zhao

29 May 2025, 17:02 UTC

Permalink

I can reproduce your problem, you have to add the redirect URL under the web (not single page application). After that, you will be able to use the auth code flow to get the code.

Similar problem，see: here and here and here.

2 question comments

Use comments to ask for clarification. Post a solution as an answer.

Carl ZhaoPermalink

28 May 2025, 05:02 UTC

Try to change the platform configuration from SPA to Web. What is the result?

w. Patrick GalePermalink

31 May 2025, 05:02 UTC

This likely depends heavily on the type of application architecture you are using (not mentioned in the question). I received this error as well trying to use the AzureADProvider in Next-Auth (v4) for a NextJs app (standard NextJs server config - not custom server) with Azure configuration set to the SPA platform. However when I switched to using @azure/msal-browser and @azure/msal-react I had to switch my Azure app platform back to SPA for the authentication to succeed.

Keep exploring this topic

invalid_grant: AADSTS50126: Error validating credentials due to invalid username or password

I am trying to hit a post request to https://login.microsoftonline.com//oauth2/token from my Java Code, but I am getting the error "invalid_grant: AADSTS50126: Error validating credentials due to invalid username or password" . I have verified the credentials and they are correct (I am able to login to Azure portal and see m

How should I be implementing user SSO with AAD in a Django application (using the Django Microsoft Authentication Backend module)?

I'm developing a Django (2.2.3) application with Django Microsoft Auth installed to handle SSO with Azure AD. I've been able to follow the quickstart documentation to allow me to log into the Django Admin panel by either using my Microsoft identity, or a standard username and password I've added to the Django user table. This all works ou

How can I implement SSO Authentication with Active Directory in React App?

I'm trying to create a front end application using React for an organization that already has a SSO (Single Sign On) system implemented using AD (Active Directory), and I want their employees to be able to login in my app using the same credentials. Is there a way to do so using React only (if Yes, please How !) or should I use another te

Azure Active Directory - Universal with MFA "missing" from SSMS authentication options

I am trying to connect to from SSMS/VS 2022 to a database hosted on Azure. When trying to login via either application, the authentication option "Azure Active Directory - Universal with MFA" is not available, in fact, no Azure Active Directory options are available at all. The options I have are below... enter image description here I ha

AADSTS9002325: Proof Key for Code Exchange is required for cross-origin authorization code redemption

1 answer

2 question comments

Your perspective belongs here.

Good answers start here.