使用Azure Active Directory时Azure Devops REST API

Question

我使用adal4j Java库通过Azure Active Directory对Azure DevOps REST API调用进行身份验证。我可以使用个人访问令牌进行身份验证，但不能使用Active Directory。这是我一直在运行的代码：

AuthenticationResult result = null;
ExecutorService service = null;
try {
  service = Executors.newFixedThreadPool(1);
  AuthenticationContext context = new AuthenticationContext("https://login.microsoftonline.com/" + tenantId + "/", false, service);
  if (clientId != null && clientKey != null) {
    ClientCredential credentials = new ClientCredential(clientId, clientKey);
    Future<AuthenticationResult> future = context.acquireToken("499b84ac-1321-427f-aa17-267ca6975798", credentials, null);
    result = future.get();
  }
} finally {
  if (service != null) {
    service.shutdown();
  }
}

我已经使用正确的目录/租户从Azure DevOps组织设置连接到Azure Active Directory。我还在应用程序注册中添加了Azure DevOps user_impersonation权限（委派）。

我在这里做错了什么？我如何解决这个问题？

Answer 1

user_impersonation意味着只能使用用户权限调用此API。但是，您将获得带有客户端凭据的令牌，而客户端凭据仅具有应用程序权限。

要获取用户的令牌，可以尝试以下代码：

    public static AuthenticationResult GetToeknWithPasswordForDevOps(String username, String password){
        ExecutorService service = Executors.newFixedThreadPool(1);
        AuthenticationContext context = null;
        AuthenticationResult result = null;
        try {
            context = new AuthenticationContext(AUTHORITY, true, service);
            Future<AuthenticationResult> future = context.acquireToken("499b84ac-1321-427f-aa17-267ca6975798", "{your publuc app client id}", username, password, null);
            result = future.get();
        } catch (InterruptedException e) {
            e.printStackTrace();
        } catch (ExecutionException e) {
            e.printStackTrace();
        } catch (MalformedURLException e) {
            e.printStackTrace();
        } finally {
            service.shutdown();
        }
        return result;
    }