Access token issue while accessing the graph API

Question

I am using the code below to fetch user from the azure AD using the graph API, but somehow I am getting the token access issue while doing so.

static async void MakeRequest()
        {
            var client = new HttpClient();

            var queryString = HttpUtility.ParseQueryString(string.Empty);

            /* OAuth2 is required to access this API. For more information visit:
               https://msdn.microsoft.com/en-us/office/office365/howto/common-app-authentication-tasks */



            // Specify values for the following required parameters
            queryString["api-version"] = "1.6";
            // Specify values for path parameters (shown as {...})
            // var uri = "https://graph.windows.net/microsoft.onmicrosoft.com/users/{[email protected]}?" + queryString;

            var uri = "https://graph.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/users?api-version=1.6";

            var response = await client.GetAsync(uri);

            if (response.Content != null)
            {
                var responseString = await response.Content.ReadAsStringAsync();
                Console.WriteLine(responseString);
            }


        }

This code is taken up from TechNet.

Your code is missing the part where it should send the access--token as a header for the client object — Haitham Shaddad
– Haitham Shaddad, Commented Nov 21, 2016 at 9:30
Thanks for quick response. Can you please provide a sample code for that? — Siddharth
– Siddharth, Commented Nov 21, 2016 at 9:51
This is the article that I have used. msdn.microsoft.com/en-us/library/azure/ad/graph/api/… — Siddharth
– Siddharth, Commented Nov 21, 2016 at 9:53
Check this link github.com/microsoftgraph/aspnet-connect-rest-sample/blob/… — Haitham Shaddad
– Haitham Shaddad, Commented Nov 21, 2016 at 10:21

Fei Xue · Accepted Answer · 2016-11-22 07:50:21Z

3

It depends on how you want to acquire the token. There are lots of scenario to integrate the application with Azure AD. You can refer it from here.

For example, if you want to use the Azure AD Graph in a daemon or service application, we can use the Client Credential flow.

1 . First we need to register an web application on the portal( detail steps refer here) and grant the permission to read the directory data like figure below:

2 . And then we can get the clientId, secret, tenantId from the portal and use the code below to acquire token(need to install the Active Directory Authentication Library)

string authority = "https://login.microsoftonline.com/{tenantId}";
string clientId = "";
string secret = "";
string resrouce = "https://graph.windows.net";

var credential = new ClientCredential(clientId, secret);
AuthenticationContext authContext = new AuthenticationContext(authority);

var token = authContext.AcquireTokenAsync(resrouce, credential).Result.AccessToken;

Console.WriteLine(token);

3 . Then we can use this token to call the Azure AD Graph REST directly or we can use the graph client library for Azure AD to retrieve the users. Here is the code samples for your reference:

//use the Azure AD client library
string accessToken = "";
string tenantId = ""; 
string graphResourceId = "https://graph.windows.net";

Uri servicePointUri = new Uri(graphResourceId);
Uri serviceRoot = new Uri(servicePointUri, tenantId);

ActiveDirectoryClient client = new ActiveDirectoryClient(serviceRoot, async () => await Task.FromResult(accessToken));

foreach(var user in client.Users.ExecuteAsync().Result.CurrentPage)
            Console.WriteLine(user.DisplayName);

//using the HTTP request 
var client = new HttpClient();
var tenantId = "";
var uri = $"https://graph.windows.net/{tenantId}/users?api-version=1.6";
var token = "";
client.DefaultRequestHeaders.Authorization = new System.Net.Http.Headers.AuthenticationHeaderValue("bearer", token);
var response = client.GetAsync(uri).Result;
var result = response.Content.ReadAsStringAsync().Result;
Console.WriteLine(result);

Update

The secrecy is available for the web application/web API when you create an application. Then you can generate the key by keys section like figure below. After you save the app, you can copy the secrect now.

edited Nov 22, 2016 at 7:50

answered Nov 22, 2016 at 2:47

Fei Xue

14.7k1 gold badge24 silver badges30 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

Siddharth Over a year ago

Thanks a lot for the information..really helpful!! i registered my app in the ad and obtained all the endpoints and id's but I am unable to locate the secret.

Fei Xue Over a year ago

The secrecy is available for the web application/web API when you create an application. Then you can generate the key by keys section. Please refer the post for the figure.

Fei Xue Over a year ago

@dotnetman Have you fixed this issue now? If you still have the issue, please feel free to let me know.

Siddharth Over a year ago

Xue: yes the issue is resolved. Thanks for the help!

Collectives™ on Stack Overflow

Access token issue while accessing the graph API

1 Answer 1

Update

4 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Update

4 Comments

Your Answer

Sign up or log in

Post as a guest

Related