問題描述
我是 Azure AD 的新手,想通過我的 Java 應用程序與之交互.經過一番研究,我發現我們需要獲取 bearer_token 才能使用 Azure AD 的 Graph API.
我正在關注
誰能告訴我這個代碼"是什么以及我應該如何獲得它?
注意:我有 Azure AD 的免費試用帳戶.
非常感謝任何幫助!
問候,阿米特
您正在嘗試使用授權碼授予流程.您可以在 微軟文檔
這是一個兩步過程:
步驟 1:通過點擊/authorize 端點獲取授權碼.您將收到一個授權碼作為此調用的響應.示例如下:
//換行符僅用于易讀性https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize?client_id=6731de76-14a6-49ae-97bc-6eba6914391e&response_type=代碼&redirect_uri=http%3A%2F%2Flocalhost%2Fmyapp%2F&response_mode=查詢&scope=openid%20offline_access%20https%3A%2F%2Fgraph.microsoft.com%2Fmail.read&狀態=12345
第 2 步:一旦您獲得了之前通話的授權碼,您就可以將其兌換為訪問令牌.示例如下:
//換行符僅用于易讀性POST/{租戶}/oauth2/v2.0/token HTTP/1.1主持人:https://login.microsoftonline.com內容類型:application/x-www-form-urlencodedclient_id=6731de76-14a6-49ae-97bc-6eba6914391e&scope=https%3A%2F%2Fgraph.microsoft.com%2Fmail.read&code=OAAABAAAAiL9Kn2Z27UubvWFPbm0gLWQJVzCTE9UkP3pSx1aXxUjq3n8b2JRLk4OxVXr...&redirect_uri=http%3A%2F%2Flocalhost%2Fmyapp%2F&grant_type=授權碼&client_secret=JqQX2PNo9bpM0uEihUPzyrh//注意:只有網絡應用需要
I am newbie to Azure AD and want to interact with it through my java app. After doing some research, I found that we need to get bearer_token in order to use Graph API for Azure AD.
I am following this link to get bearer token but facing issue with one of parameters.
Now as shown in below image from above link, there are several parameters and information related to them is given like what they are and how to retrieve them but I dont see any information related 'code' parameter.
Can somebody tell me what is this 'code' and how am I supposed to get it?
Note: I have free trial account of Azure AD.
Any help is much appreciated!
Regards, Amit
You are trying to use Authorization Code Grant Flow. You can read in detail about the flow and steps here in Microsoft Docs
It's a two step process:
STEP 1: Get Authorization Code by hitting the /authorize endpoint. You will get an authorization_code back as response for this call. Example shown below:
// Line breaks for legibility only
https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize?
client_id=6731de76-14a6-49ae-97bc-6eba6914391e
&response_type=code
&redirect_uri=http%3A%2F%2Flocalhost%2Fmyapp%2F
&response_mode=query
&scope=openid%20offline_access%20https%3A%2F%2Fgraph.microsoft.com%2Fmail.read
&state=12345
STEP 2: Once you have an authorization_code from previous call, you can redeem it for an access token. Example shown below:
// Line breaks for legibility only
POST /{tenant}/oauth2/v2.0/token HTTP/1.1
Host: https://login.microsoftonline.com
Content-Type: application/x-www-form-urlencoded
client_id=6731de76-14a6-49ae-97bc-6eba6914391e
&scope=https%3A%2F%2Fgraph.microsoft.com%2Fmail.read
&code=OAAABAAAAiL9Kn2Z27UubvWFPbm0gLWQJVzCTE9UkP3pSx1aXxUjq3n8b2JRLk4OxVXr...
&redirect_uri=http%3A%2F%2Flocalhost%2Fmyapp%2F
&grant_type=authorization_code
&client_secret=JqQX2PNo9bpM0uEihUPzyrh // NOTE: Only required for web apps
這篇關于使用 Azure AD Graph API 時如何獲取用于獲取 access_token 的“代碼"的文章就介紹到這了,希望我們推薦的答案對大家有所幫助,也希望大家多多支持html5模板網!