是否可以帮助我使用节点js客户端在Azure AD B2C中创建用户。
在该请求中,我需要填充" signInNames"和我在B2c中为我的应用程序创建的自定义用户属性。
如果您分享样本请求,我们非常感谢。
答案 0 :(得分:5)
以下代码使用Azure Active Directory Authentication Library (ADAL) for Node.js和request个包与the Azure AD Graph API进行互动。
1)获取用于Azure AD Graph API的访问令牌:
const AuthenticationContext = require("adal-node").AuthenticationContext;
const tenant = "myb2cdomain.onmicrosoft.com";
const authority = `https://login.microsoftonline.com/{tenant}`;
const authenticationContext = new AuthenticationContext(authority);
function acquireTokenForApplication(clientId, clientSecret, callback) {
authenticationContext.acquireTokenWithClientCredentials("https://graph.windows.net/", clientId, clientSecret, function(err, tokenResponse) {
if (err) {
callback(err);
return;
}
callback(null, tokenResponse.access_token);
});
}
2)创建用户对象:
const userToBeCreated = {
accountEnabled: true,
creationType: "LocalAccount",
displayName: "Alex Wu",
passwordPolicies: "DisablePasswordExpiration",
passwordProfile: {
forceChangePasswordNextLogin: false,
password: "Test1234"
},
signInNames: [
{
type: "emailAddress",
value: "alexw@example.com"
}
],
"extension_xxx_<customAttributeName>": <customAttributeValue>
};
其中&#34; xxx&#34;必须替换为b2c-extensions-app
应用程序的应用程序标识符(不带连字符)。
E.g:
"extension_ab603c56068041afb2f6832e2a17e237_SkypeId": "alexw.skype"
3)将用户对象发送到the Azure AD Graph API:
function createUser(tenantId, accessToken, userToBeCreated, callback) {
request.post({
url: `https://graph.windows.net/${encodeURIComponent(tenantId)}/users?api-version=1.6`,
auth: {
bearer: accessToken
},
body: userToBeCreated,
json: true
}, (err, response, responseBody) => {
if (err) {
callback(err);
return;
}
if (!isSuccessStatusCode(response.statusCode)) {
const errorResult = responseBody;
callback({
code: errorResult["odata.error"].code,
message: errorResult["odata.error"].message.value
});
return;
}
const createdUser = responseBody;
callback(null, createdUser);
});
}