Recently I was trying to refresh a MSGraph token to a token for mysignins.microsoft.com, but failed. The original auth code flow uses client_id 19db86c3-b2b9-44cc-b339-36da233a3be2 and scope 0000000c-0000-0000-c000-000000000000%2F.default+openid. Anyone has ideas or experiences?
I tried it using two methods:
1. Calling the /token endpoint with grant_type refresh_token. It gave me error":"invalid_grant"
2. I tried initiating a device code flow using the client_id and scope that I found in the original browser-based auth code flow.
Both didn't work