[英]Consuming Azure REST API in C# application shows no response
当我在azure docs post man上尝试azure rest api url时,我能够得到一个拥有所有资源组的json。 https://docs.microsoft.com/en-us/rest/api/resources/resourcegroups/list#code-try-0 一个链接
但我从ASP.NET MVC Core C#应用程序尝试它,我收到一个空数组。
public async Task<ResourceGroupModel> GetResourceGroupStatus()
{
ResourceGroupModel resourceGroupModel = null;
try
{
string requestUrlString = iconfiguration.GetValue<string>("HealthSettings:AzureGetResourcesBySubscriptionURL");
string azureSubscription = iconfiguration.GetValue<string>("HealthSettings:AzureSubscription");
string clientId = iconfiguration.GetValue<string>("HealthSettings:ClientId");
string tenantId = iconfiguration.GetValue<string>("HealthSettings:TenantId");
string clientSecret = iconfiguration.GetValue<string>("HealthSettings:ClientSecret");
Uri requestUrl = new Uri(requestUrlString.Replace("{subscriptionId}", azureSubscription));
string token = await GetAccessToken(tenantId, clientId, clientSecret);
_httpClient.DefaultRequestHeaders.Remove("Authorization");
_httpClient.DefaultRequestHeaders.Add("Authorization", "Bearer " + token);
var response = _httpClient.GetAsync(requestUrl);
if (response.Result.IsSuccessStatusCode)
{
var data = response.Result.Content.ReadAsStringAsync();
resourceGroupModel = ResourceGroupModel.FromJson(data.Result.ToString());
}
}
catch (Exception ex)
{
}
return resourceGroupModel;
}
能帮我摆脱Azure REST API的奇怪行为吗? 提前谢谢了。 :)
您的服务主体无权访问资源组。
正如Ciubotariu所说,您的服务主体无权访问资源组。 但是,如果仅将服务主体添加到资源组,则只能获取指定的资源组。 因此, 请将您的服务主体添加到您的订阅中 。 以下是步骤:
1.转到您的订阅,单击“访问控制”>“添加”(添加角色分配)
2.添加您的服务主体并为其分配角色,如Contributor。
更新:
这是我使用的完整代码:
var appId = "xxxxxxxxxxxxxxx";
var secretKey = "xxxxxxxxxxxxxxxxxxxxx";
var tenantId = "xxxxxxxxxxxxxxxxx";
var context = new AuthenticationContext("https://login.windows.net/" + tenantId);
ClientCredential clientCredential = new ClientCredential(appId, secretKey);
var tokenResponse = context.AcquireTokenAsync("https://management.azure.com/", clientCredential).Result;
var accessToken = tokenResponse.AccessToken;
using (var client = new HttpClient())
{
client.DefaultRequestHeaders.Add("Authorization", "Bearer " + accessToken);
var baseUrl = new Uri($"https://management.azure.com/");
var requestURl = baseUrl +
@"subscriptions/xxxxxxxxxxxxxxxx/resourcegroups?api-version=2019-05-01";
var response = client.GetAsync(requestURl).Result.Content.ReadAsStringAsync().Result;
}
删除现有的clientsecret并为服务原则创建新的clientsecret解决了这个问题。
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.