More Microsoft Graph Misc Notes
Relaying more shared information:
“I also wanted to notify you that the “profile” can also be extracted without the use of Graph API (User.Read):
id_token contains that information and is given along with the access_token but it has to be decoded from a JWT (https://en.wikipedia.org/wiki/JSON_Web_Token)
openid, profile, email and offline_access are like some kind of “universal” scopes which can be mixed with Graph scopes and Outlook scopes. But Graph and Outlook scopes can’t be mixed to get the same access token, they require different tokens.
I had to dig for a long time to find that info, hopefully it will help you.
Everything works now and Chilkat works great with it now.”
Also.. here’s sample code for decoding an ID token: