AAD Access Tokens returned in v1.0 when v2.0 is requested. Can't use Certificate to request a token about microsoft-store-services HOT 3 CLOSED

Hi Marco,
I'm on end-of-year vacation at the moment but let me get back to you on this hopefully later today. Thanks for pinging @ me so that I saw this more directly and it didn't get lost in my notifications.

from microsoft-store-services.

Ok I reviewed the above and I'll do the best that I can to provide some information, but I wish I had better news. So, the specific Microsoft Store tokens are owned by a team other than the MSA team. They are specific to the Commerce / Microsoft Store Services form what I have been able to understand when working with them. That just happens to be v1.0 and was not updated to v2.0.

Although you are able to setup your app registration for v2.0 tokens, the commerce related tokens you would then ask for are limited to what that service accepts and generates. From the above info and what I have seen as well, those are v1.0 tokens. So, although other MSA services are able to generate the right v2.0 tokens with Certificates, the Microsoft Store Services only support v1.0 and therefore when getting those you would need to use a secret key rather than a certificate.

So from here I don't see a way you can generate the needed tokens for b2b auth with the Microsoft Store Services using certificates. That would require the team that owns the token generating API's within the purchase and collections endpoints to upgrade and implement the v2.0 token model. Since the token services for this have not been touched in many years and it is difficult for even me to find the current owner, I doubt that would be something that would happen at this point given other priorities and initiatives the commerce team has on their backlog.

from microsoft-store-services.

Alright @CameronGoodwin thanks a lot for your time, even on vacation by providing this gold information.
Bottom line, we can't get tokens for Microsoft Store Services by using certificates as of now. A limitation of the Microsoft Store Services API.

I'm closing this question because as you said, it's not expected that support anytime soon.

Wish you a merry christmas to you and your family.

from microsoft-store-services.