在 .NET Core 2.2 中调用 AcquireTokenAsync 时出现 502.3

Question

我遇到了问题。我正在使用 Microsoft Graph 通过OnBehalfOfMsGraphAuthenticationProvider.cs 获取当前登录的用户，如下面的solution 所示。

这一直完美无缺，但我一直在进行一些重构，突然在尝试执行我的 authContext.AcquireTokenAsync() 方法时出现错误。

HTTP Error 502.3 - Bad Gateway

有问题的代码如下所示：

public async Task AuthenticateRequestAsync(HttpRequestMessage request) {
    var httpContext = _httpContextAccessor.HttpContext;

    //Get the access token used to call this API
    string token = await httpContext.GetTokenAsync("access_token");

    //We are passing an *assertion* to Azure AD about the current user
    //Here we specify that assertion's type, that is a JWT Bearer token
    string assertionType = "urn:ietf:params:oauth:grant-type:jwt-bearer";

    //User name is needed here only for ADAL, it is not passed to AAD
    //ADAL uses it to find a token in the cache if available
    var user = httpContext.User;
    string userName =
        user.FindFirst(ClaimTypes.Upn).Value ?? user.FindFirst(ClaimTypes.Email).Value;

    var userAssertion = new UserAssertion(token, assertionType, userName);

    //Construct the token cache
    var cache = new DistributedTokenCache(user, _distributedCache,
        _loggerFactory, _dataProtectionProvider);

    var authContext = new AuthenticationContext(_configuration["AzureAd:Instance"] +
        _configuration["AzureAd:TenantId"], true, cache);

    var clientCredential = new ClientCredential(_configuration["AzureAd:ClientId"],
        (string) _configuration["AzureAd:ClientSecret"]);

    //Acquire access token
    var result = await authContext.AcquireTokenAsync("https://graph.microsoft.com", clientCredential, userAssertion); //This is where it crashes

    //Set the authentication header
    request.Headers.Authorization = new AuthenticationHeaderValue(result.AccessTokenType, result.AccessToken);
}

我是通过我的OrdersController 调用它的：

// POST: api/Orders
[HttpPost]
public async Task<IActionResult> CreateAsync([FromBody] OrderDTO order) {
        if (!ModelState.IsValid) {
            return BadRequest(ModelState);
        }

        var graphUser = await this.graphApiService.GetUserProfileAsync();

重构包括将我的解决方案分为两个类库项目和一个 Web 项目——后者包含控制器和 React 应用程序。 GraphAPiClient 和提供程序位于核心库中，如下所示：

Screenshot of architecture

Answer 1

所以，当我将包 Microsoft.IdentityModel.Clients.ActiveDirectory 从 v3.19.8 升级到 v4.4.1 时，问题出现了。出于某种原因，没有高于 v3.19.8 的版本适用于我的代码，导致当我尝试调用 https://graph.microsoft.com 时它崩溃，但一旦我降级问题就消失了。

Answer 2

尝试使用 AcquireToken 而不是 AcquireTokenAsync

azureAuthenticationContext.AcquireToken