Possible for user to intercept access token (for calling Microsoft Graph API) when user causes .NET Core 2.0 app (ASP.NET Core) to call an application service?

Showing live article 2828 of 9386 in channel 54021951
Article Details:

Author:
Language: English
Channel Number: 54021951
Article Number: 2828
Date: September 20, 2017, 4:45 am
URL: https://forums.asp.net/p/2129056/6167053.aspx?Possible+for+user+to+intercept+access+token+for+calling+Microsoft+Graph+API+when+user+causes+NET+Core+2+0+app+ASP+NET+Core+to+call+an+application+service+
GUID: urn:uuid:00000000-0000-0000-0000-000006167053