Azure AD B2C Redirects with a "#" before the id_token
<p>I've created a B2C setup, based on some documentation. I've referred to the following link. </p>

<p><a href="https://blogs.technet.microsoft.com/ad/2015/09/16/azure-ad-b2c-and-b2b-are-now-in-public-preview/" rel="nofollow">https://blogs.technet.microsoft.com/ad/2015/09/16/azure-ad-b2c-and-b2b-are-now-in-public-preview/</a></p>

<p>So I have setup a redirect_uri, say,  </p>

<p><strong>"http s://mycompany.com/login/"</strong></p>

<p>and used Google as my identity provider. However, when I do a sign-up / sign-in, the system redirects me from the sign-up / sign-in page to  </p>

<p><strong>"http s://mycompany.com/login/#id_token=eyJ0eXAi..."</strong></p>

<p>The redirect URL returned by B2C contains an "id_token" variable, and upon checking it in "<a href="http://calebb.net/" rel="nofollow">http://calebb.net/</a>", the details it contains are as expected.</p>

<p>The issue I have is with the hash "#" mark after the redirect_uri, and before the id_token variable.   Because of the hash, the id_token variable is not sent to our server, because of the default behavior of browsers to not send anything after the hash mark. The hash mark is a fragment identifier.</p>

<p>Thus I am unable to obtain the value of the id_token. </p>

<p>Is there a way to overcome this limitation, so that our server application can obtain the value of id_token from the URL returned by the B2C system? Or is this like a bug in B2C that needs fixing?</p>

<p>I am using a Python/Django web application.</p>

<p>Thanks.</p>