title: Does Microsoft Graph support OAuth 2.0 tokens in URIs?
body: <p>I am trying to configure Odoo 11 to work with our business' directory on Microsoft Azure AD through OAuth 2.0.</p>
  <p>Odoo 11 uses the implicit method to acquire a token - this seems to work okay and I can get a valid token from the <code>https://login.microsoftonline.com/&lt;company_domain&gt;/oauth2/v2.0/authorize</code> endpoint.</p>
  <p>It then uses the method described in Section 2.3 of <a href="https://www.rfc-editor.org/rfc/rfc6750" rel="nofollow noreferrer">RFC6750</a> to read the endpoint data. This method involves sending a query to <code>https://graph.microsoft.com/v1.0/me?access_token=&lt;access_token&gt;</code></p>
  <p>I know the token is valid because I can use <code>https://www.hurl.it</code> to send a query to <code>https://graph.microsoft.com/v1.0/me</code> with a request header of <code>Authorization: Bearer &lt;access_token&gt;</code> and I get the expected results. This is according to the method described in Section 2.1 of RFC6750 which is the only method I have come across in Microsoft's documentation.</p>
  <p>If I manually try to send a request per section 2.3 I get an error response from Microsoft Graph:</p>
  <pre class="lang-json prettyprint-override"><code>{
      &quot;error&quot;: {
          &quot;code&quot;: &quot;InvalidAuthenticationToken&quot;,
          &quot;message&quot;: &quot;Bearer access token is empty.&quot;,
          &quot;innerError&quot;: {
              &quot;request-id&quot;: &quot;2319fe00-8695-481d-8850-d1b8ed973292&quot;,
              &quot;date&quot;: &quot;2018-01-23T19:12:15&quot;
          }
      }
  }
  </code></pre>
  <p>So my question is: Does Microsoft Graph support the request method in Section 2.3 of RFC6750?</p>