title: AADSTS50058: A silent sign-in request was sent but no user is signed in
body: <p>I am using hello.js to sign in Microsoft Graph.</p>
  
  <p>First I initialized by</p>
  
  <pre><code>hello.init({
      msft: {
        id: myAppId,
        oauth: {
          version: 2,
          auth: 'https://login.microsoftonline.com/common/oauth2/v2.0/authorize'
        },
        scope_delim: ' ',
        form: false
      },
    },
    { redirect_uri: window.location.href }
  );
  </code></pre>
  
  <p>Then I signed in successfully in my app</p>
  
  <pre><code>hello('msft').login({ scope: 'User.Read' })
  </code></pre>
  
  <p>This is what hello.js saved in localStorage after signing in.</p>
  
  <pre><code>{
    "msft": {
    "access_token":"aLongToken",
      "token_type":"Bearer",
      "expires_in":3599,
      "scope":"basic,User.Read",
      "state":"",
      "session_state":"f034f785-f8d0-4cec-aab4-88559c9d93dd",
      "client_id":"a91e6907-2b6e-4793-848d-633e960e809d",
      "network":"msft",
      "display":"popup",
      "redirect_uri":"http://localhost:3006/login",
      "expires":1501800737.361
    }
  }
  </code></pre>
  
  <p>However, when I try to refresh the access_token</p>
  
  <pre><code>hello('msft').login({
    display: 'none',
    response_type: 'id_token token',
    response_mode: 'fragment',
    nonce: 'my-app',
    prompt: 'none',
    scope: 'User.Read',
    login_hint: 'Rose.Bukater@company.com',
    domain_hint: 'organizations'
  })
  </code></pre>
  
  <p>I got the error</p>
  
  <blockquote>
    <p>AADSTS50058: A silent sign-in request was sent but no user is signed
    in. The cookies used to represent the user's session were not sent in
    the request to Azure AD. This can happen if the user is using Internet
    Explorer or Edge, and the web app sending the silent sign-in request
    is in different IE security zone than the Azure AD endpoint
    (login.microsoftonline.com).</p>
  </blockquote>
  
  <p>I am using Chrome.</p>
  
  <p>Found <a href="https://github.com/AzureAD/azure-activedirectory-library-for-js/issues/323" rel="noreferrer">this issue</a> on GitHub. But still didn't figure out how to refresh correctly.</p>
  
  <hr>
  
  <p>UPDATE:</p>
  
  <p>After disable <strong>Allow Implicit Flow</strong> at <a href="https://apps.dev.microsoft.com" rel="noreferrer">https://apps.dev.microsoft.com</a>, now I even failed to log in. So this is not the correct solution. hello.js saved this error in the localStorage:</p>
  
  <pre><code>{
    "msft": {
      "error": {
        "code":"unsupported_response_type",
        "message":"AADSTS70005: response_type 'token' is not enabled for the application\r\nTrace ID: 1dc20dd0-cab3-41b5-9849-2a7e35d60700\r\nCorrelation ID: caacce8f-6763-405d-a840-70c24d5306d4\r\nTimestamp: 2017-08-04 21:56:42Z"
      },
      "error_description":"AADSTS70005: response_type 'token' is not enabled for the application\r\nTrace ID: 1dc20dd0-cab3-41b5-9849-2a7e35d60700\r\nCorrelation ID: caacce8f-6763-405d-a840-70c24d5306d4\r\nTimestamp: 2017-08-04 21:56:42Z",
      "state":"",
      "client_id":"a91e6907-2b6e-4793-848d-633e960e809d",
      "network":"msft",
      "display":"popup",
      "redirect_uri":"http://localhost:3006/login",
      "scope":"basic,User.Read"
    }
  }
  </code></pre>