Merge pull request #299 from Azure-Samples/fix-api-permission-bug

Fix the token type helper method

Author: derisen

3-Authorization-II/1-call-api/API/TodoListAPI/Controllers/TodoListController.cs

@@ -38,7 +38,7 @@ private bool IsAppOnlyToken()
             else
             {
                 // alternatively, if an AT contains the roles claim but no scp claim, that indicates it's an app token
-                return HttpContext.User.Claims.Any(c => c.Type == "roles") && HttpContext.User.Claims.Any(c => c.Type != "scp");
+                return HttpContext.User.Claims.Any(c => c.Type == "roles") && !HttpContext.User.Claims.Any(c => c.Type == "scp");
             }
         }
 

3-Authorization-II/1-call-api/README-incremental.md

@@ -324,7 +324,7 @@ private bool IsAppOnlyToken()
     else
     {
         // alternatively, if an AT contains the roles claim but no scp claim, that indicates it's an app token
-        return HttpContext.User.Claims.Any(c => c.Type == "roles") && HttpContext.User.Claims.Any(c => c.Type != "scp");
+        return HttpContext.User.Claims.Any(c => c.Type == "roles") && !HttpContext.User.Claims.Any(c => c.Type == "scp");
     }
 }
 ```

3-Authorization-II/1-call-api/README.md

@@ -379,7 +379,7 @@ private bool IsAppOnlyToken()
     else
     {
         // alternatively, if an AT contains the roles claim but no scp claim, that indicates it's an app token
-        return HttpContext.User.Claims.Any(c => c.Type == "roles") && HttpContext.User.Claims.Any(c => c.Type != "scp");
+        return HttpContext.User.Claims.Any(c => c.Type == "roles") && !HttpContext.User.Claims.Any(c => c.Type == "scp");
     }
 }
 ```

6-AdvancedScenarios/2-call-api-mt/API/TodoListAPI/Controllers/TodoListController.cs

@@ -38,7 +38,7 @@ private bool IsAppOnlyToken()
             else
             {
                 // alternatively, if an AT contains the roles claim but no scp claim, that indicates it's an app token
-                return HttpContext.User.Claims.Any(c => c.Type == "roles") && HttpContext.User.Claims.Any(c => c.Type != "scp");
+                return HttpContext.User.Claims.Any(c => c.Type == "roles") && !HttpContext.User.Claims.Any(c => c.Type == "scp");
             }
         }