如何使用Azure移动应用后端从Microsoft Graph中为经过身份验证的用户获取用户信息？

Question

Using the backend of my app, I am attempting to capture information from Microsoft Graph for a user that has been authenticated and then add that user to a database. The authentication appears to be working correctly, but the user is never added to the database. I am really stuck on this. I've studied the online documentation extensively, but have been unable to find a solution. If I could just tell if the user properties were getting populated, I could figure out what's going on, but I've been unable to do that since the code runs on the server. (I've attempted to remote debug, but have been unable to successfully set a breakpoint.) Can anyone tell me what I'm doing wrong in the code below?

class MicrosoftAccountInfo
{
    public string id { get; set; }
    public string displayName { get; set; }
    public string mail { get; set; }
}

[MobileAppController]
public class MicrosoftAccountController : ApiController
{
    MicrosoftAccountCredentials credentials;
    string msRequestUrl;
    MyAppContext context;
    EntityDomainManager<User> domainManager;

    // GET api/<controller>
    public async Task<User> Get()
    {
        if (credentials == null)
        {
            credentials = await this.User.GetAppServiceIdentityAsync<MicrosoftAccountCredentials>(this.Request);
        }         

        msRequestUrl = "https://graph.microsoft.com/v1.0/me/?$select=id,displayName,mail";

        var client = new System.Net.Http.HttpClient();
        var headerValue = "Bearer" + credentials.AccessToken;
        client.DefaultRequestHeaders.Add("Authorization", headerValue);
        var resp = await client.GetAsync(msRequestUrl);
        resp.EnsureSuccessStatusCode();
        var msInfo = await resp.Content.ReadAsStringAsync();

        MicrosoftAccountInfo info = JsonConvert.DeserializeObject<MicrosoftAccountInfo>(msInfo);
        context = new MyAppContext();
        domainManager = new EntityDomainManager<User>(context, Request);
        var user = context.Users.FirstOrDefault(u => u.Email == info.mail);
        if (user == null)
        {
            user = new DataObjects.User { Email = info.mail, UserName = info.displayName, ProviderId = info.id };
            await domainManager.InsertAsync(user);
        }
        else if (string.IsNullOrEmpty(user.ProviderId))
        {
            user.UserName = info.displayName;
            user.ProviderId = info.id;
            await context.SaveChangesAsync();
        }
        return user;
    }
}

Answer 1

As to why this is failing, it is difficult to determine without an actual error message. There are simply to many variables/potential failure points involved to say for sure.

That said, you can reduce the number of potential failure points by using the Microsoft Graph .NET Client Library . There is also a NuGet package available: Install-Package Microsoft.Graph .

This library will handle composing the Microsoft Graph and deserializing the response into an object. Along with removing a risk factor, it will greatly simplify your code:

Microsoft.Graph.GraphServiceClient graphClient =
    new Microsoft.Graph.GraphServiceClient(new DelegateAuthenticationProvider((requestMessage) =>
    {
        requestMessage.Headers.Authorization =
            new System.Net.Http.Headers.AuthenticationHeaderValue("bearer", "{your-access-token}");
        return Task.FromResult(0);
    }));

Microsoft.Graph.User user = await graphClient.Me.Request().GetAsync();

I would also suggest implementing a monitoring solution that can trap exceptions on the server. This will help with debugging. If you're running on Azure, I strongly recommend using Application Insights . Aside from being free to get started, it is effectively a "click once, get monitoring" solution. It will handle wiring up the server and provide reporting for any exceptions it runs into.

Note that you can also use App Insights with your own servers or apps hosted on other services (ie AWS, RackSpace), there may however be some manual configuration required.