I have implemented SPA and express.js WEB Api applications, SPA authenticates using msal.js V2 and acquires access_token including roles: [], and spc: [] containing correct roles and scopes.

WEB Api is called using access_token received, it gets decoded at API side using passport-azure-ad library initialised using BearerStrategy. It extracts information from the token, but finally throws error: authentication failed due to: In Strategy.prototype.jwtVerify: none of the scopes 'Execute.Api' in token is accepted, where Execute.Api is my custom scope.

Would be great if someone help me to resolve this issue, project is at critical stage because of this.