authContext.AcquireTokenSilentAsync抛出错误

时间:2017-01-11 09:21:46

标签: azure active-directory azure-active-directory azure-ad-graph-api

我参考了this git项目。该项目具有连接和获取用户配置文件信息的代码。

在运行项目时,我看到我无法通过以下代码获得成功结果 -

                result = await authContext.AcquireTokenSilentAsync(graphResourceId, credential,
                new UserIdentifier(userObjectID, UserIdentifierType.UniqueId));

这是完整代码 -

 // Get the access token from the cache
            string userObjectID =
                ClaimsPrincipal.Current.FindFirst("http://schemas.microsoft.com/identity/claims/objectidentifier")
                    .Value;

            string authority = String.Format(CultureInfo.InvariantCulture, aadInstance, tenant);

            //AuthenticationContext authContext = new AuthenticationContext(authority,
            //    new NaiveSessionCache(userObjectID));
            ClientCredential credential = new ClientCredential(clientId, appKey);
            AuthenticationContext authContext = new AuthenticationContext(authority, true);

            // AcquireTokenSilentAsync
            result = await authContext.AcquireTokenSilentAsync(graphResourceId, credential,
                new UserIdentifier(userObjectID, UserIdentifierType.UniqueId));

            // Call the Graph API manually and retrieve the user's profile.
            string requestUrl = String.Format(
                CultureInfo.InvariantCulture,
                graphUserUrl,
                HttpUtility.UrlEncode(tenantId));
            HttpClient client = new HttpClient();
            HttpRequestMessage request = new HttpRequestMessage(HttpMethod.Get, requestUrl);
            request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", result.AccessToken);
            HttpResponseMessage response = await client.SendAsync(request);

            // Return the user's profile in the view.
            if (response.IsSuccessStatusCode)
            {
                string responseString = await response.Content.ReadAsStringAsync();
                profile = JsonConvert.DeserializeObject<UserProfile>(responseString);
            }

我厌倦了用 UserIdentifierType.RequiredDisplayableId 替换 UserIdentifierType.UniqueId ,但仍然无法获得成功的结果。

经过一整天的努力,我无法弄清楚这个解决方案。

我非常感谢任何帮助。

0 个答案:

没有答案