Microsoft Entra ID
Microsoft Entra authorization code was already redeemed
AADSTS54005: OAuth2 Authorization code was already redeemed.
Microsoft Entra ID rejected the token request because the authorization code has already been used and cannot be redeemed again.
Observed message
AADSTS54005: OAuth2 Authorization code was already redeemed.
Why it happens
- The same authorization code was submitted more than once.
- The client retried token redemption with a code that had already been consumed.
- Parallel or duplicate callback handling redeemed the code twice.
How to fix it
- Ensure the authorization code is redeemed exactly once.
- Start a fresh sign-in flow to obtain a new code if the old one has already been used.
- Check callback and retry logic for duplicate token exchange attempts.
