尝试使用缓存令牌时出现 "cannot convert" 错误

Question

我在尝试使用缓存令牌时遇到以下错误。我在这里使用作为示例提供的列表：https://docs.microsoft.com/bs-latn-ba/azure/active-directory/develop/msal-net-acquire-token-silently

cannot convert from 'System.Collections.Generic.IEnumerable' to 'Microsoft.Identity.Client.IAccount'`

        static async Task<GraphServiceClient> Auth()
        {

            var clientApp = PublicClientApplicationBuilder.Create(ConfigurationManager.AppSettings["clientId"]).Build();
            string[] scopes = new string[] { "user.read" };
            string token = null;
            var app = PublicClientApplicationBuilder.Create(ConfigurationManager.AppSettings["clientId"]).Build();
            AuthenticationResult result = null;
            var accounts = await app.GetAccountsAsync();

                result = await app.AcquireTokenSilent(scopes, accounts)
                       .ExecuteAsync();
                token = result.AccessToken;

            GraphServiceClient graphClient = new GraphServiceClient(
                        "https://graph.microsoft.com/v1.0",
                        new DelegateAuthenticationProvider(
                            async (requestMessage) =>
                            {
                                requestMessage.Headers.Authorization = new AuthenticationHeaderValue("bearer", token);
                            }));
            return graphClient;
        }

Answer 1

导致错误的调用是这个

result = await app.AcquireTokenSilent(scopes, accounts)
                  .ExecuteAsync();

AcquireTokenSilent 需要两个变量，IEnumerable<String> (scops) 和 string (loginHint)。您为 loginHist 传递的是一个帐户数组，而它应该是一个字符串（单个帐户）。

var accounts = await app.GetAccountsAsync();

GetAccountsAsync() 的 return 类型是 IEnumerable 这就是它在那个调用中抛出错误的原因。

在一个example here中，查找的帐户来自列表。

// Get the account
IAccount account = await application.GetAccountAsync(accountIdentifier).ConfigureAwait(false);

// Special case for guest users as the Guest oid / tenant id are not surfaced.
if (account == null)
{
    if (loginHint == null)
        throw new ArgumentNullException(nameof(loginHint));

    var accounts = await application.GetAccountsAsync().ConfigureAwait(false);
    account = accounts.FirstOrDefault(a => a.Username == loginHint);
}

将此行添加到您的代码中：

var accounts = await app.GetAccountsAsync();
IAccount account = accounts.FirstOrDefault(a => a.Username == loginHint); // <--- Get Account from accounts
result = await app.AcquireTokenSilent(scopes, account) // Use account instead of accounts.
                  .ExecuteAsync();
token = result.AccessToken;

尝试使用缓存令牌时出现 "cannot convert" 错误

Getting a "cannot convert" error when trying to used a cached token

.net

c#

azure-ad-graph-api