OAuth2 Token -How to Specify Resource

unknown

Hi

i am converting an api integration from Azure AD Graph to Microsoft graph api and have run into an issue when requesting the OAuth token from ION api . Using Postman i am able to request the token and post requests if i specify the "resource" under advanced options when configuring the token .

Looking at the Request - the "Resource" is in the request body 

How do i specify the resource in ION API Token endpoint security ? , i have tried adding it as custom parameters but does not appear to be working 

Currently all Requests result in the below error , this is due to the resource not been specified as "">https://graph.microsoft.com/"

{
  <span class="hljs-attr">"error": {
    <span class="hljs-attr">"code": "InvalidAuthenticationToken",
    <span class="hljs-attr">"message": "Access token validation failure. Invalid audience.",
    <span class="hljs-attr">"innerError": {
      <span class="hljs-attr">"date": "2022-12-07T09:42:02",
      <span class="hljs-attr">"request-id": "4364f46c-504b-4734-812f-2dff1d06d0ce",
      <span class="hljs-attr">"client-request-id": "4364f46c-504b-4734-812f-2dff1d06d0ce"
    }
  }
}

unknown

I'm not sure if this will work for you or not.  But this is how I have postman set up.   I don't have a resource prompt to fill in.

Type: OAuth2.0

Add Auth data to:  Request Headers

Header Prefix;  Bearer

Token Name: Bearer

Grant Type:  Password Credentials

Access Token URL: pu value from ion api file and add token.oauth.2 at the end.
ex: https://mingle-sso.inforcloudsuite.com:443/PEACEHEALTH_DEV/as/token.oauth.2

Client ID:  ci value from ion api file

Client Secret:  cs value from ion api file

Username: saak value from ion api file

Password: sask value from ion api file

Scope:  leave blank

Client Authentication:  Send as Basic Auth header

I've automated this in process by using the following to get an access token:

var OAuth2Data = JSON.parse(_configuration.main.ServiceAccount.toString()); //this is just the string of data from the ion api file
var request = "grant_type=password&username=" + OAuth2Data.saak + "&password=" + OAuth2Data.sask + "&scope=&client_id=" + OAuth2Data.ci + "&client_secret=" + OAuth2Data.cs;

Use a WEBRUN node:

Web root: <!OAuth2Data.iu>  -- which is iu value from ion api file

web program:<!OAuth2Data.ti>/as/token.oauth2?

Header String: 

Content-Type: application/x-www-form-urlencoded
accept: application/json

Method:  POST

Post String: <!request>

Context Type: text/plain

use this to get the auth token from the results of the webrun.

var obj = JSON.parse(RequestToken_result);
authToken = "Authorization:Bearer " +obj.access_token;

you can then use this token in another webrun node in the Header string, using whatever web program you need.

accept: application/json
Content-Type: application/json
<!authToken>

Hope this helps.