title: Azure Active Directory tokens missing App Roles in JWT
body: <p>I have an two applications registered in my Active Directory App registrations, a client and an API. Via the "expose an API" blade, the client app has been trusted by the API app. I have additionally added 4 application roles (IE in the manifest <code>allowedMemberTypes: ["Application"]</code>) to the API app, and added them as permissions to the client app.</p>
  
  <p>When I get an access token via client credential flow, for the client app's appid, and decode the token via jwt.io to see the claims, I can see the roles I assigned to the client app just fine, all in a nice neat array.</p>
  
  <p>However, using auth flow, and logging in as myself (belonging to the directory), using the same secret, scope, client id, etc., the app roles are missing from the token that is sent back with that flow, it is in neither the id token nor the auth token.</p>
  
  <p>What am I missing here? Did I forget a step, or is it that authorization flow does not support application member approles?</p>