如何从 azure AD 应用程序客户端 ID 生成令牌？

Question

我有one application which is register into azure AD. 我有client id with me and secret key is inside the key vault.

如何使用控制台应用访问安全的 Azure AD 注册 API？

我猜我是need a bearer token for it how to generate it?

我搜索并得到类似下面的代码 -

var authority = "https://login.microsoftonline.com/your-aad-tenant-id/oauth2/token";
var context = new AuthenticationContext(authority);
var resource = "https://some-resource-you-want-access-to";

var clientCredentials = new ClientCredential(clientId, clientSecret);

var result = await context.AcquireTokenAsync(resource, clientCredentials);  

Answer 1

您可以尝试下面的代码来生成令牌，在我的示例中，我为https://graph.microsoft.com 生成令牌。

string graphResourceId = "https://graph.microsoft.com/";
string authority = "https://login.microsoftonline.com/your-aad-tenant-id/oauth2/token";
string tenantId = "your-aad-tenant-id";
string clientId = "your-clientid";
string secret = "your-secret";
authority = String.Format(authority, tenantId);
AuthenticationContext authContext = new AuthenticationContext(authority);
var accessToken = authContext.AcquireTokenAsync(graphResourceId, new ClientCredential(clientId, secret)).Result.AccessToken;