Open
Description
Environment
- Operating System: Windows_NT
- Node Version: v20.17.0
- Nuxt Version: 3.12.4
- CLI Version: 3.12.0
- Nitro Version: 2.9.7
- Package Manager: npm@10.8.2
- Builder: -
- User Config: compatibilityDate, nitro, devtools, imports, modules, ssr, auth, primevue, css, runtimeConfig, plugins, openFetch
- Runtime Modules: @primevue/nuxt-module@4.0.4, @nuxtjs/tailwindcss@6.12.1, @pinia/nuxt@0.5.3, nuxt-open-fetch@0.9.1, @sidebase/nuxt-auth@0.9.2
- Build Modules: -
Reproduction
Setup an Azure App registration as a Single tenant account.
Integrate nuxt-auth as usual against the azure ad provider
AzureADProvider.default({
clientId: runtimeConfig.azureAdClientId,
clientSecret: runtimeConfig.AzureAdClientSecret,
tenantId: runtimeConfig.AzureAdTenantId,
}),
auth: {
isEnabled: true,
globalAppMiddleware: true,
disableServerSideAuth: false,
originEnvKey: 'NUXT_AUTH_ORIGIN',
provider: {
type: 'authjs',
trustHost: false,
defaultProvider: 'azure-ad',
addDefaultCallbackUrl: true,
},
},
Describe the bug
When faced with the microsoft login screen and login is performed error
AADSTS50194: Application 'app guid'(app name) is not configured as a multi-tenant application. Usage of the /common endpoint is not supported for such applications created after '10/15/2018'. Use a tenant-specific endpoint or configure the application to be multi-tenant.
occurs due to the "https://login.microsoftonline.com/common/reprocess" url is called
Additional context
Need settings similar to msal's authority or next-auths authorization. Tried those settings but does not work
AzureADProvider.default({
clientId: runtimeConfig.azureAdClientId,
clientSecret: runtimeConfig.AzureAdClientSecret,
tenantId: runtimeConfig.AzureAdTenantId,
authorization: {
url: `https://login.microsoftonline.com/${runtimeConfig.azureAdTenantId}/oauth2/v2.0/authorize`,
params: { scope: "user.Read" }
},
token: `https://login.microsoftonline.com/${runtimeConfig.azureAdTenantId}/oauth2/v2.0/token`,
}),
Logs
No response