ASP.NET Core 3.1：為什么我無法獲得訪問令牌？

Question

我能夠獲得 id_token 但是當我嘗試獲得訪問令牌時我得到 null 。 我不知道為什么？

var token = await HttpContext.GetTokenAsync(OpenIdConnectParameterNames.IdToken); // token has value
var accessToken = await HttpContext.GetTokenAsync(OpenIdConnectParameterNames.AccessToken);// accessToken is null

啟動.cs：

   public void ConfigureServices(IServiceCollection services)
    {
        var jwtTokenConfig = Configuration.GetSection("jwtTokenConfig").Get<JwtTokenConfig>();
        services.AddSingleton(jwtTokenConfig);
        services.AddSingleton<IJwtAuthManager, JwtAuthManager>();
        services.AddHostedService<JwtRefreshTokenCache>();
        services.Configure<CookiePolicyOptions>(options =>
        {
            options.MinimumSameSitePolicy = SameSiteMode.Unspecified;
            options.OnAppendCookie = cookieContext =>
                CheckSameSite(cookieContext.Context, cookieContext.CookieOptions);
            options.OnDeleteCookie = cookieContext =>
                CheckSameSite(cookieContext.Context, cookieContext.CookieOptions);
        });

        services.AddCors(options =>
        {

            options.AddPolicy("CorsPolicy",
                builder => builder.AllowAnyOrigin()
                .AllowAnyMethod()
                .AllowAnyHeader());
        });
        
        services.Configure<OpenIdConnectOptions>(OpenIdConnectDefaults.AuthenticationScheme, options =>
        {
            

            options.Events.OnRedirectToIdentityProviderForSignOut = async context =>
            {
                Console.WriteLine("intercepted");
            };
        });

    


        var azureAd = new AzureAd();
        Configuration.GetSection("AzureAd").Bind(azureAd);
        services.AddControllersWithViews();

        services.AddAuthentication(AzureADDefaults.AuthenticationScheme)
            .AddAzureAD(options => Configuration.Bind("AzureAd", options));

     
        var url = "https://localhost:5001/platform/signin-oidc";

        services.Configure<OpenIdConnectOptions>(AzureADDefaults.OpenIdScheme, options =>
        {
            options.SaveTokens = true;

            options.Events = new OpenIdConnectEvents
            {

                OnRedirectToIdentityProvider = async context =>
                {
                    context.ProtocolMessage.RedirectUri = url;

                    //context.Response.Headers.Add("Referrer-Policy", "no-referrer");
                    await Task.FromResult(0);
                }
            };
        });

    }

Answer 1

請嘗試代碼，請參見此處。

var accessToken = await HttpContext.GetTokenAsync(IdentityConstants.ExternalScheme, OpenIdConnectParameterNames.AccessToken)

我們通常通過 Azure AD 按照此示例進行授權： https://github.com/AzureAdQuickstarts/AppModelv2-WebApp-OpenIDConnect-DotNet