如何在不使用对话框的情况下授权使用Azure Active Directory

Question

我的应用程序为所有用户显示了我的Power BI帐户的仪表板，我正在通过对话框授权Azure Active Directory获得访问令牌。我可以在不使用授权对话框的情况下硬编码我的凭据并获取访问令牌。代码。它有效，但正在使用授权对话框。

           var @params = new NameValueCollection
        {
            {"response_type", "code"},
            {"client_id", Properties.Settings.Default.ClientID},
            {"resource", "https://analysis.windows.net/powerbi/api"},
            {"redirect_uri", "http://localhost:13526/Redirect"}
        };

        var queryString = HttpUtility.ParseQueryString(string.Empty);
        queryString.Add(@params);
        string authorityUri = "https://login.windows.net/common/oauth2/authorize/";
        var authUri = String.Format("{0}?{1}", authorityUri, queryString);
        Response.Redirect(authUri);

        Redirect.aspx
        string redirectUri = "http://localhost:13526/Redirect";
        string authorityUri = "https://login.windows.net/common/oauth2/authorize/";
        string code = Request.Params.GetValues(0)[0];
        TokenCache TC = new TokenCache();
        AuthenticationContext AC = new AuthenticationContext(authorityUri, TC);
        ClientCredential cc = new ClientCredential
            (Properties.Settings.Default.ClientID,
            Properties.Settings.Default.ClientSecret);
        AuthenticationResult AR = AC.AcquireTokenByAuthorizationCode(code, new Uri(redirectUri), cc);
        Session[_Default.authResultString] = AR;
        Response.Redirect("/Default.aspx");
        Default.aspx
         string responseContent = string.Empty;
        System.Net.WebRequest request = System.Net.WebRequest.Create(String.Format("{0}dashboards", baseUri)) as System.Net.HttpWebRequest;
        request.Method = "GET";
        request.ContentLength = 0;
        request.Headers.Add("Authorization", String.Format("Bearer {0}", authResult.AccessToken));
        using (var response = request.GetResponse() as System.Net.HttpWebResponse)
        {
            using (var reader = new System.IO.StreamReader(response.GetResponseStream()))
            {
                responseContent = reader.ReadToEnd();
                PBIDashboards PBIDashboards = JsonConvert.DeserializeObject<PBIDashboards>(responseContent);
            }
        }

Answer 1

我在不使用adal的情况下完成了一次。对于Power BI，由于他们不提供申请许可，因此仅授权。

注意：如果用户启用了MFA，其密码已过期。通常，您需要使用交互式流。您甚至可以使用一个引导过程进行交互式登录，并存储收到的刷新令牌。然后，只要有效，就可以在背景中使用该刷新令牌。

您需要使用grant_type=password调用AAD令牌端点。您将在表单参数中指定用户名和密码，以及客户ID，客户端秘密和资源URI。

这是我写的功能：

private async Task<string> GetAccessToken()
{
    string tokenEndpointUri = Authority + "oauth2/token";
    var content = new FormUrlEncodedContent(new []
        {
            new KeyValuePair<string, string>("grant_type", "password"),
            new KeyValuePair<string, string>("username", Username),
            new KeyValuePair<string, string>("password", Password),
            new KeyValuePair<string, string>("client_id", ClientId),
            new KeyValuePair<string, string>("client_secret", ClientSecret),
            new KeyValuePair<string, string>("resource", PowerBiResourceUri)
        }
    );
    using (var client = new HttpClient())
    {
        HttpResponseMessage res = await client.PostAsync(tokenEndpointUri, content);
        string json = await res.Content.ReadAsStringAsync();
        AzureAdTokenResponse tokenRes = JsonConvert.DeserializeObject<AzureAdTokenResponse>(json);
        return tokenRes.AccessToken;
    }
}

授权是https://login.microsoftonline.com/tenant-id/。这是我正在使用的响应类：

class AzureAdTokenResponse
{
    [JsonProperty("access_token")]
    public string AccessToken { get; set; }
}

Answer 2

我希望使用UserCreadential您提供了Azure订阅的用户名和密码，您可以获取访问权限并致电API。我希望它应该为您提供帮助。

 string ResourceUrl="https://analysis.windows.net/powerbi/api";
 string ClientId=Properties.Settings.Default.ClientID;//as per your code
 AuthenticationContext authenticationContext = new AuthenticationContext(Constants.AuthString, false);
 UserCredential csr = new UserCredential("your-username", "password");
 AuthenticationResult authenticationResult = authenticationContext.AcquireToken(ResourceUrl,ClientId, usr);
 string token = authenticationResult.AccessToken;