title: Getting 401 when accessing API protected with Azure AD
body: <p>I am getting 401 while I am accessing custom API (.NET Framework) hosted in Azure and protected with Azure AD from SPA web app (React). The access_token seems to be fine, I can easily decrpyt it in jwt.io
  I setup both of apps with this tutorial <a href="https://docs.microsoft.com/en-us/azure/app-service/tutorial-auth-aad?pivots=platform-windows#enable-authentication-and-authorization-for-back-end-app" rel="nofollow noreferrer">https://docs.microsoft.com/en-us/azure/app-service/tutorial-auth-aad?pivots=platform-windows#enable-authentication-and-authorization-for-back-end-app</a></p>
  <p>Both of my apps (API and SPA) have enabled implicit grant with both tokens.
  Is there something I am missing ? I can authorize users, get their tokens in SPA. When I disable authentication/authorization for web api in Azure, everything is going fine.</p>
  <p>API permissions in SPA app
  <a href="https://i.stack.imgur.com/8Iio3.png" rel="nofollow noreferrer">spa permissions</a></p>