asp.net Webapi登录azureAD并调用azure graph api

1. 需要安装的包：
Microsoft.Azure.ActiveDirectory.GraphClient
Microsoft.IdentityModel.Clients.ActiveDirectory

C# 实例包含：
1. 使用用户名密码登录获取accesstoken和idtoken
2. 使用idtoken获取idtoken和accesstoken
3. 调用graphapi获得更多信息

internal class AzureADGlobalConstants
{
public const string AuthString = "https://login.microsoftonline.com/";
public const string ResourceUrl = "https://graph.windows.net";
public const string GraphServiceObjectId = "00000002-0000-0000-c000-000000000000";
}

public class CertisAdLoginController : ApiController
{
public class LoginResult
{
public bool IsSuccess { get; set; }
public string ErrorMessage { get; set; }
public object Data { get; set; }
public IUser UserDetail { get; set; }
}
internal class AzureADAppConstants
{
/// <summary>
/// The application id ,you can login to azure portal ->
/// Azure Active Directory ->
/// Registered Apps -> click the app
/// </summary>
public const string ClientId = "your_app_id";

/// <summary>
/// Login to your azure portal ->
/// Azure Active Directory ->
/// Registered Apps -> click the app
/// keys -> add new
/// </summary>
public const string ClientSecret = "your_app_key";

/// <summary>
/// this is used to construct the login user name:
/// e.g.  someone@xxx.onmicrosoft.com
/// </summary>
public const string TenantName = "yourdomain@onmicrosoft.com";

/// <summary>
/// you can get this value form below steps :
/// Login to your azure portal ->
/// Azure Active Directory ->
/// Properties -> DirectoryId
/// </summary>
public const string TenantId = "your_tenant_id";
}

/// <summary>
/// Login with idToken
/// </summary>
/// <param name="idToken"></param>
/// <returns></returns>
[HttpPost]
public IHttpActionResult Login(string idToken)
{
try
{
string directoryName = AzureADAppConstants.TenantName;
string clientId = AzureADAppConstants.ClientId;
var credentials = new UserAssertion(idToken);
var authenticationContext = new AuthenticationContext(AzureADGlobalConstants.AuthString + directoryName);
var result = authenticationContext.AcquireTokenAsync(AzureADGlobalConstants.ResourceUrl, clientId, credentials).Result;
var tokenGetter = Task.Run(() => { return result.AccessToken; });
// get more details
var userDetail = GetUserDetailById(tokenGetter, result.UserInfo.UniqueId);

return Ok(new LoginResult()
{
IsSuccess = true,
Data = result,
ErrorMessage = "",
UserDetail = userDetail
});
}
catch (Exception ex)
{
return Ok(new LoginResult()
{
IsSuccess = false,
ErrorMessage = ex.Message
});
}
}

/// <summary>
/// Login with username/password
/// </summary>
/// <param name="username"></param>
/// <param name="password"></param>
/// <returns></returns>
[HttpPost]
public IHttpActionResult Login(string username, string password)
{
try
{
string directoryName = AzureADAppConstants.TenantName;
string clientId = AzureADAppConstants.ClientId;
var credentials = new UserPasswordCredential(string.Format("{0}@{1}", username, directoryName), password);
var authenticationContext = new AuthenticationContext(AzureADGlobalConstants.AuthString + directoryName);
var result = authenticationContext.AcquireTokenAsync(AzureADGlobalConstants.ResourceUrl, clientId, credentials).Result;
var tokenGetter = Task.Run(() => { return result.AccessToken; });
// get more details
var userDetail = GetUserDetailById(tokenGetter, result.UserInfo.UniqueId);

return Ok(new LoginResult()
{
IsSuccess = true,
Data = result,
ErrorMessage = "",
UserDetail = userDetail
});
}
catch (Exception ex)
{
return Ok(new LoginResult()
{
IsSuccess = false,
ErrorMessage = ex.Message
});
}
}

private IUser GetUserDetailById(Task<string> accessToken, string userid)
{
Uri servicePointUri = new Uri(AzureADGlobalConstants.ResourceUrl);
Uri serviceRoot = new Uri(servicePointUri, CertisAdLoginController.AzureADAppConstants.TenantId);
ActiveDirectoryClient client = new ActiveDirectoryClient(serviceRoot, () =>
{
return accessToken;
});

IUser firstMatch = null;
try
{
IUserCollection userCollection = client.Users;
firstMatch = userCollection.Where(user =>
user.ObjectId == userid)
.Take(10).ExecuteAsync().
Result.CurrentPage.First();

return firstMatch;
}
catch (Exception e)
{
return null;
}
}

}

完整示例： https://github.com/iorilan/WebApiAzureADSample