我有一个由我的组织管理的Azure AD帐户。第三方组织已邀请我的帐户查看其Office Online SharePoint系统上托管的SharePoint Online内容。当我在浏览器中访问SharePoint网站时,我可以毫无问题地使用它。
但是,当我使用相同的用户转到Microsoft Graph API Explorer应用并在https://graph.microsoft.com/beta/sharepoint/site
向SharePoint端点发出请求时,我收到以下回复:
Status Code: 500
{
"error": {
"code": "InternalServerError",
"message": "Unable to resolve template token",
"innerError": {
"request-id": "0b354b5d-ceaf-48d9-adb8-b97a7dcf07ad",
"date": "2017-01-12T23:02:25"
}
}
}
此问题出现在Graph API Explorer应用中,请参见屏幕截图:
明确我的目标:我希望第三方合作伙伴邀请我查看他们的Office 365 SharePoint内容(我能够在SharePoint在线网站上成功浏览它) ,然后我应该能够通过Microsoft Graph API导航相同的内容。
出现的一个问题是,在此工作流程中使用了哪些链接来获取我的身份验证令牌。我从浏览器的开发人员工具中捕获的请求如下所示。请注意适当使用Sites.ReadWrite.All范围,该范围应授予必要的权限:https://login.microsoftonline.com/common/oauth2/v2.0/authorize?response_type=id_token+token&scope=openid%20User.Read%20User.ReadWrite%20User.ReadBasic.All%20Mail.ReadWrite%20Mail.ReadWrite.Shared%20Mail.Send%20Mail.Send.Shared%20Calendars.ReadWrite%20Calendars.ReadWrite.Shared%20Contacts.ReadWrite%20Contacts.ReadWrite.Shared%20MailboxSettings.ReadWrite%20Files.ReadWrite%20Files.ReadWrite.All%20Files.ReadWrite.Selected%20Files.ReadWrite.AppFolder%20Notes.ReadWrite%20Notes.ReadWrite.All%20Notes.ReadWrite.CreatedByApp%20Notes.Create%20Tasks.ReadWrite%20Tasks.ReadWrite.Shared%20 Sites.ReadWrite.All & client_id = de8bc8b5-d9f9-48b1-a8ad-b748da725064& ; REDIRECT_URI = HTTPS%3A%2F%2Fgraph.microsoft.io%2Fen-我们%2Fgraph-探险&安培;状态= e3777b0b-5be3-442a-bb78-a82422baf709&安培;客户请求-ID = df0a7be7-de18-4881-873d-717a5783cde9&安培X-客户SKU =&的js放大器; X-客户-VER = 2.0.0实验&安培;随机数= bff18134-8121-424f-a1ce-0c6ad87b177c