Avatar problem when using microsoft login

[1k-off]

Hi.

I'm using microsoft login to access self-hosted outline wiki (docker installation).
But users can't see their avatars or upload new avatar. At the same time I see next error in logs:

{"error":"Invalid authentication","stack":"UnauthorizedError: Invalid authentication\n    at AuthenticationError (/opt/outline/build/server/errors.js:35:34)\n    at AzureClient.rotateToken (/opt/outline/build/server/utils/oauth.js:75:47)\n    at runMicrotasks (<anonymous>)\n    at processTicksAndRejections (node:internal/process/task_queues:96:5)\n    at async Object.refreshAccessTokenIfNeeded (/opt/outline/build/server/models/UserAuthentication.js:155:24)\n    at async Object.validateAccess (/opt/outline/build/server/models/UserAuthentication.js:110:7)\n    at async Promise.all (index 0)\n    at async /opt/outline/build/server/queues/tasks/ValidateSSOAccessTask.js:40:21\n    at async /opt/outline/node_modules/sequelize/lib/sequelize.js:503:18\n    at async ValidateSSOAccessTask.perform (/opt/outline/build/server/queues/tasks/ValidateSSOAccessTask.js:26:5)\n    at async Queue.<anonymous> (/opt/outline/build/server/services/worker.js:132:7)","level":"error","message":"Error processing task in ValidateSSOAccessTask"}

The error appears both when refreshing page or when trying to upload new avatar.

Azure app registration was set with this manual: https://wiki.generaloutline.com/share/dfa77e56-d4d2-4b51-8ff8-84ea6608faa4

Other azure-related features seems working fine (like login, getting username and email from profile, etc).

This problem reprats from v0.64.3 (may be earlier, that was first installed version) to v0.65.2.

[begemotik]

I do notice the same messages in logs, though I can change the avatar without errors.

Relevant for 0.66.0 version.

{"error":"Authentication required","stack":"UnauthorizedError: Authentication required\n    at AuthenticationError (/opt/outline/build/server/errors.js:41:34)\n    at AzureClient.rotateToken (/opt/outline/build/server/utils/oauth.js:75:47)\n    at runMicrotasks (<anonymous>)\n    at processTicksAndRejections (node:internal/process/task_queues:96:5)\n    at async Object.refreshAccessTokenIfNeeded (/opt/outline/build/server/models/UserAuthentication.js:157:24)\n    at async Object.validateAccess (/opt/outline/build/server/models/UserAuthentication.js:110:7)\n    at async Promise.all (index 0)\n    at async /opt/outline/build/server/queues/tasks/ValidateSSOAccessTask.js:40:21\n    at async /opt/outline/node_modules/sequelize/lib/sequelize.js:503:18\n    at async ValidateSSOAccessTask.perform (/opt/outline/build/server/queues/tasks/ValidateSSOAccessTask.js:26:5)\n    at async Queue.<anonymous> (/opt/outline/build/server/services/worker.js:132:7)","level":"error","message":"Error processing task in ValidateSSOAccessTask"}
{"name":"views.create","modelId":"f4fb2dc5-d0dc-4cec-b7f0-5fdec317828c","attempt":0,"label":"worker","level":"info","message":"Processing views.create"}
{"userId":"49e15b93-e05b-47a1-a6cb-8b85fc208efd","label":"worker","level":"info","message":"ValidateSSOAccessTask running"}
{"id":"2d179753-0ad1-469b-a1b1-ad18f1bdd3b8","userId":"49e15b93-e05b-47a1-a6cb-8b85fc208efd","label":"utils","level":"info","message":"Refreshing expiring access token"}
{"error":"Authentication required","stack":"UnauthorizedError: Authentication required\n    at AuthenticationError (/opt/outline/build/server/errors.js:41:34)\n    at AzureClient.rotateToken (/opt/outline/build/server/utils/oauth.js:75:47)\n    at runMicrotasks (<anonymous>)\n    at processTicksAndRejections (node:internal/process/task_queues:96:5)\n    at async Object.refreshAccessTokenIfNeeded (/opt/outline/build/server/models/UserAuthentication.js:157:24)\n    at async Object.validateAccess (/opt/outline/build/server/models/UserAuthentication.js:110:7)\n    at async Promise.all (index 0)\n    at async /opt/outline/build/server/queues/tasks/ValidateSSOAccessTask.js:40:21\n    at async /opt/outline/node_modules/sequelize/lib/sequelize.js:503:18\n    at async ValidateSSOAccessTask.perform (/opt/outline/build/server/queues/tasks/ValidateSSOAccessTask.js:26:5)\n    at async Queue.<anonymous> (/opt/outline/build/server/services/worker.js:132:7)","level":"error","message":"Error processing task in ValidateSSOAccessTask"}