Authenticating and accessing gmail accounts

[aelhennawy]

Core Library

MSAL.js (@azure/msal-browser)

Core Library Version

3.10.0

Wrapper Library

MSAL Angular (@azure/msal-angular)

Wrapper Library Version

3.0.13

Public or Confidential Client?

Public

Description

First of all if this is not the right place to post this please let me know where to post it.
I'm getting an error when trying to access gmail accounts. I was able to get the token for my gmail account that I've added to the Outlook Mac client, The problem i have when trying to list messages in the inbox using Graph APIs i get an empty list.
Also when i try to get specific message i get an error

Error Message

{ "error": { "code": "ErrorInvalidMailboxItemId", "message": "Item '{ITEM_ID}' doesn't belong to the targeted mailbox '{MAILBOX}'." } }

MSAL Logs

No response

Network Trace (Preferrably Fiddler)

• Sent
• Pending

MSAL Configuration

MsalModule.forRoot(
      new PublicClientApplication({
        auth: {
          clientId: environment.msalConfig.auth.clientId,
          authority: environment.msalConfig.auth.authority,
          redirectUri: "/",
          postLogoutRedirectUri: '/'
        },
        cache: {
          cacheLocation: BrowserCacheLocation.LocalStorage,
        },
        system: {
          allowNativeBroker: false,
          loggerOptions: {
            loggerCallback,
            logLevel: LogLevel.Info,
            piiLoggingEnabled: false
          }
        }
      }),
      {
        interactionType: InteractionType.Popup,
        authRequest: {
          scopes: environment.apiConfig.scopes,
        },
      },
      {
        interactionType: InteractionType.Popup, // MSAL Interceptor Configuration
        protectedResourceMap: new Map([
          [environment.apiConfig.uri, environment.apiConfig.scopes],
          [environment.apiConfig.uri + "/messages", environment.apiConfig.scopes],
        ]),
      }
    ),

Relevant Code Snippets

const url: string = `https://graph.microsoft.com/v1.0/me/messages`;

    this.http.get(url).subscribe((response: any) => {
      console.log(response);
    });

Reproduction Steps

1. Acquire token
2. Call Graph API
3. Token is added to the request using the Interceptor

Expected Behavior

List of messages inside the inbox folder

Identity Provider

Entra ID (formerly Azure AD) / MSA

Browsers Affected (Select all that apply)

Other

Regression

No response

Source

Internal (Microsoft)