Xbox Live 身份验证错误 400 错误请求

Question

我正在尝试使用 msal 节点（我正在使用这个 sample）在 xbox live 中与 Microsoft 进行身份验证并使用我返回的令牌，问题是当我收到错误 400（错误请求）时尝试调用 xboxlive。

 await axios
        .post(
            "https://user.auth.xboxlive.com/user/authenticate",
            {
                Properties: {
                    AuthMethod: "RPS",
                    SiteName: "user.auth.xboxlive.com",
                    RpsTicket: token, // the token i get from msal
                },
                RelyingParty: "http://auth.xboxlive.com",
                TokenType: "JWT",
            },
            {
                headers: {
                    "Content-Type": "application/json",
                    Accept: "application/json",
                },
            }
        )
        .then((x) => console.log("success", x))
        .catch((e) => console.error("error", e));

Answer 1

看来您需要在令牌前面加上d=，然后将其作为 RpsTicket 的值传递。这是基于xbox-webapi-node npm module。

await axios.post(
   "https://user.auth.xboxlive.com/user/authenticate",
   {
       Properties: {
           AuthMethod: "RPS",
           SiteName: "user.auth.xboxlive.com",
           RpsTicket: "d=" + token, // the token
       },
       RelyingParty: "http://auth.xboxlive.com",
       TokenType: "JWT",
    },
    {
        headers: {
            "Content-Type": "application/json",
            Accept: "application/json",
        },
     }
)
.then((x) => console.log("success", x))
.catch((e) => console.error("error", e));