Service principal is main option

This commit is contained in:
christianwade 2019-05-08 16:46:52 -07:00
parent 94a22ea210
commit 6eaab734c8

View File

@ -64,23 +64,26 @@ namespace RestApiSample
private static async Task<string> UpdateToken() private static async Task<string> UpdateToken()
{ {
string resourceURI = "https://*.asazure.windows.net"; string resourceURI = "https://*.asazure.windows.net";
string clientID = "<App ID>"; // Native app with necessary API permissions
string authority = "https://login.windows.net/common/oauth2/authorize"; string authority = "https://login.windows.net/<TenantID>/oauth2/authorize";
//string authority = "https://login.windows.net/<TenantID>/oauth2/authorize"; // Authority address can optionally use tenant ID in place of "common". If service principal or B2B enabled, this is a requirement.
AuthenticationContext ac = new AuthenticationContext(authority); AuthenticationContext ac = new AuthenticationContext(authority);
#region Interactive or username/password
//string clientID = "<App ID>"; // Native app with necessary API permissions
//Interactive login if not cached: //Interactive login if not cached:
AuthenticationResult ar = await ac.AcquireTokenAsync(resourceURI, clientID, new Uri("urn:ietf:wg:oauth:2.0:oob"), new PlatformParameters(PromptBehavior.Auto)); //AuthenticationResult ar = await ac.AcquireTokenAsync(resourceURI, clientID, new Uri("urn:ietf:wg:oauth:2.0:oob"), new PlatformParameters(PromptBehavior.Auto));
//Username/password: //Username/password:
//UserPasswordCredential cred = new UserPasswordCredential("<User ID (UPN e-mail format)>", "<Password>"); //UserPasswordCredential cred = new UserPasswordCredential("<User ID (UPN e-mail format)>", "<Password>");
//AuthenticationResult ar = await ac.AcquireTokenAsync(resourceURI, clientID, cred); //AuthenticationResult ar = await ac.AcquireTokenAsync(resourceURI, clientID, cred);
#endregion
//Service principal: //Service principal:
//12/19/2017: Bug disallows use of service principals. At time of writing, the fix is being rolled out to production clusters. Please retry soon if not working by the time you try it. ClientCredential cred = new ClientCredential("<App ID>", "<App Key>");
//ClientCredential cred = new ClientCredential("<App ID>", "<App Key>"); AuthenticationResult ar = await ac.AcquireTokenAsync(resourceURI, cred);
//AuthenticationResult ar = await ac.AcquireTokenAsync(resourceURI, cred);
return ar.AccessToken; return ar.AccessToken;
} }