scope update via application patch function not working

Open

#2,293 opened on Feb 7, 2025 4 comments 0 reactions 1 assignee View on GitHub

@andrueastman is already working on this.

Since Feb 19, 2025.

Assessment

This issue has not been assessed yet.

Description

Status: Needs Investigation type:bug

Describe the bug

Since updating to Microsoft Graph SDK version 6.17.0, our functions for updating/patching an application's 'oauth2PermissionScopes' seem to be failing in our Kotlin app.

Java Version: 17
Kotlin Version: 2.1.0

For example, if I try to change the 'oauth2PermissionScopes' name from "Files.Read" to "Directory.Read," the response from the 'Application patch' function is null. I assume this is a good sign since, when I debug and intentionally cause an error, such as by using an incorrect application ID (or object ID), I do receive an error response.

executed code to patch application:

fun updateApplication(app: Application) {
        try {
            graphServiceClient.applications()
                .byApplicationId(app.id)
                .patch(app)
        } catch (e: ApiException) {
            ...
        }
    }

applicationToUpdate.api.oauth2PermissionScopes JSON object:

[
  {
    "id": "1234abcd-12ab-12ab-12ab-123456abcdef",
    "name": "Files.Read",
    "type": "User",
    "consentDisplayName": "Read your files",
    "consentDescription": "Allows the application to read your directories"
  }
]

However, when using version 6.16.0, the application’s 'oauth2PermissionScopes' are updated successfully after calling the patch function. In contrast, when performing the same operation with version 6.17.0, the 'oauth2PermissionScopes' remain unchanged (in this case, still showing "Files.Read").

Expected behavior

I'd expect, that the 'oauth2PermissionScopes' would be updated the same as in version '6.16.0'.

How to reproduce

search a test application
create an application object of the test application
change the oauth2PermissionScopes name
run the application patch function using the object id you copied and the application object copy you created

SDK Version

=> 6.17.0

Latest version known to work for scenario above?

6.16.0

Known Workarounds

No response

Debug output

Click to expand log

```

</details>


### Configuration

_No response_

### Other information

_No response_

Dominant language: Java
Stars: 444
Forks: 154
Avg merge: 18h 28m
Merged PRs (30d): 4

Contributor guide

Open the contributing guide

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

Compatibility certification request for FJ-EAP 2.1.0 for Jakarta EE Platform 11 Open

certification

Difficulty 1/5 Under an hour Newbie friendliness 80/100

jakartaee/platform#1359 · Opened Sep 24, 2026
Python guide test runner copies stale Micronaut Test Resources state Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

micronaut-projects/micronaut-guides#1856 · Opened Sep 23, 2026
[BUG] ECR GetAuthorizationToken returns a proxyEndpoint for the default region, not the request's Open

bug ecr

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

floci-io/floci#4264 · Opened Sep 23, 2026
Drop point numbers from GitHub milestones Open

Needs: Triage Type: Feature request

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

AntennaPod/AntennaPod#8794 · Opened Sep 23, 2026
[aw] Issue Classification Agent timed out Open

agentic-workflows

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

github/copilot-sdk#2760 · Opened Sep 23, 2026

More Java issues