How to implement incremental scope in Blazor Wasm?

[xperiandri]

I created Blazor WASM hosted on ASP.NET Core with Microsoft Identity.
It successfully works with a multi-tenant setup.
But how to handle incremental scope increase? Team.ReadBasic.All is what I want a consent to be provided to.

private async Task AuthorizeTeamReadAllAsync()
{
    // https://docs.microsoft.com/en-us/aspnet/core/blazor/security/webassembly/graph-api?view=aspnetcore-6.0#graph-sdk
    var result = await TokenProvider.RequestAccessToken(
            new AccessTokenRequestOptions()
            {
                Scopes = new[] { "User.Read", "Team.ReadBasic.All", "Directory.Read.All" }
            });
}

@jmprieur

[jmprieur]

@xperiandri : what is TokenProvider? It's not part of Microsoft.Identity.Web?

[xperiandri]

Do you have a library for WASM?

[xperiandri]

Should I move the discussion to https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/ ?
Or my request is relevant here?

[xperiandri]

If you create Blazor WASM from the template you will see
Authentication.razor

@page "/authentication/{action}"
@using Microsoft.AspNetCore.Components.WebAssembly.Authentication
<RemoteAuthenticatorView Action="@Action" />

@code{
    [Parameter] public string? Action { get; set; }
}

It handles auth with default scopes

[xperiandri]

Basically, I want that same auth popup window to open with another set of scopes

[xperiandri]

@jmprieur any updates about that?

[jmprieur]

@xperiandri blazorwasm does not rely on MSAL.NET, but MSAL.js

@javiercn would you know how to do?

[javiercn]

This is not something we currently support, but it is something we are workign on (hopefully) for .NET 7.0