尝试调用Microsoft Graph客户端时的InvalidAuthenticationToken

Question

我正在遵循GitHub上的Microsoft Graph repository提供的一个示例。其中，它描述了使用需要访问令牌的DelegateAuthenticationProvider。Marc Lafleur的auth流入门指定了一种获取访问令牌的方法，我结合了使服务-服务身份验证工作的指导。

尽管我收到了一个似乎有效的访问令牌，但当我通过graph客户端发出命令时，我会从Microsoft graph获得一个ServiceException，

这是我提出的代码：

var clientId = "[app-guid]";
var clientSecret = "[secret-from-app-dashboard]";
var resource = "[app-guid]";
var baseUrl = "https://login.microsoftonline.com";
var loginUrl = "/[tenant guid]/oauth2/token";
using (var client = new HttpClient())
{
    client.BaseAddress = new Uri(baseUrl);
    var content = new FormUrlEncodedContent(new[]
    {
        new KeyValuePair<string, string>("grant_type", "client_credentials"),
        new KeyValuePair<string, string>("client_id", clientId),
        new KeyValuePair<string, string>("client_secret", clientSecret),
        new KeyValuePair<string, string>("resource", resource)
    });
    var result = client.PostAsync(loginUrl, content).Result;
    string resultContent = result.Content.ReadAsStringAsync().Result;
    var json = JObject.Parse(resultContent);

    accessToken = (string)json["access_token"];

} 
var header = new AuthenticationHeaderValue("Bearer", accessToken);
var graphserviceClient = new GraphServiceClient(
new DelegateAuthenticationProvider(
(requestMessage) =>
{
    requestMessage.Headers.Authorization = header;


    return Task.FromResult(0);
}));
try
{
    var users = await graphserviceClient.Users.Request().GetAsync();
    var user = users.First();
}
catch (Microsoft.Graph.ServiceException servex)
{
    Console.WriteLine(servex);
}

Answer 1

您将资源设置为指向您的网站，但它应该指向您希望访问的外部web资源。试试这个：

var resource = "https://graph.microsoft.com/";