使用 Microsoft Graph + Http 客户端更改 Azure AD B2C 上的用户密码

Question

I've this code...

public class PasswordProfile { 
        public bool forceChangePasswordNextSignIn { get { return false; } }
        public string password { get; set; }
    }
protected async Task setPasswords(string newP)
    {
        PasswordProfile newPassword = new PasswordProfile()
        {
            password = newP
        };
        var content = new StringContent(JsonSerializer.Serialize(newPassword), Encoding.UTF8, "application/json");
        Http.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", appToken);
        var update = await Http.PatchAsync($"https://graph.microsoft.com/v1.0/users/{userUUID}", content);
    }

I can do this scenario using Postman. I just set the method to patch, put the json as body and it works good by returning a 204 and the password realy changed.

However my code return a 404. Any clue?

Answer 1

When you call JsonSerializer.Serialize(newPassword) it returns the following json

{
    "forceChangePasswordNextSignIn": false,
    "password": "xWwvJ]6NMw+bWH-d"
}

but Graph API endpoint expects json like this

{
  "passwordProfile": {
    "forceChangePasswordNextSignIn": false,
    "password": "xWwvJ]6NMw+bWH-d"
  }
}

You can create a new class User with PasswordProfile property and serialize an instance of User class.

public class User
{
    public PasswordProfile passwordProfile { get; set; }
}

protected async Task setPasswords(string newP)
{
    var user = new User
    {
        passwordProfile = new PasswordProfile
        {
            password = newP
        }
    }
    var content = new StringContent(JsonSerializer.Serialize(user), Encoding.UTF8, "application/json");
    Http.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", appToken);
    var update = await Http.PatchAsync($"https://graph.microsoft.com/v1.0/users/{userUUID}", content);
}