Botframework 如何首先进行身份验证，然后使用令牌进行图形 api 调用

Question

授权对话框：

import { ChoicePrompt, DialogSet, DialogTurnStatus, OAuthPrompt, TextPrompt, WaterfallDialog, ComponentDialog } from 'botbuilder-dialogs';
import GraphClient from '../graph-client';

const MAIN_WATERFALL_DIALOG = 'mainWaterfallDialog';
const OAUTH_PROMPT = 'oAuthPrompt';
const CHOICE_PROMPT = 'choicePrompt';
const TEXT_PROMPT = 'textPrompt';
import moment = require('moment');

class AuthDialog extends ComponentDialog {
    constructor() {
        super('AuthDialog');
        this.addDialog(new ChoicePrompt(CHOICE_PROMPT))
            .addDialog(new OAuthPrompt(OAUTH_PROMPT, {
                connectionName: process.env.ConnectionName,
                text: 'Please login',
                title: 'Login',
                timeout: 300000
            }))
            .addDialog(new TextPrompt(TEXT_PROMPT))
            .addDialog(new WaterfallDialog(MAIN_WATERFALL_DIALOG, [
                this.promptStep.bind(this),
                this.processStep.bind(this)
            ]));

        this.initialDialogId = MAIN_WATERFALL_DIALOG;
    }

    /**
     * The run method handles the incoming activity (in the form of a TurnContext) and passes it through the dialog system.
     * If no dialog is active, it will start the default dialog.
     * @param {*} turnContext
     * @param {*} accessor
     */
    public async run(turnContext, accessor) {
        const dialogSet = new DialogSet(accessor);
        dialogSet.add(this);

        const dialogContext = await dialogSet.createContext(turnContext);
        const results = await dialogContext.continueDialog();
        if (results.status === DialogTurnStatus.empty) {
            await dialogContext.beginDialog(this.id);
        }
    }

    public async promptStep(step) {
        return step.beginDialog(OAUTH_PROMPT);
    }

    public async processStep(step) {
        if (step.result) {
            // We do not need to store the token in the bot. When we need the token we can
            // send another prompt. If the token is valid the user will not need to log back in.
            // The token will be available in the Result property of the task.
            const tokenResponse = step.result;
            // If we have the token use the user is authenticated so we may use it to make API calls.
            if (tokenResponse && tokenResponse.token) {
                await step.context.sendActivity(`Logged in.`);
            } else {
                await step.context.sendActivity('something wrong happened.');
            }
        } else {
            await step.context.sendActivity('We couldn\'t log you in. Please try again later.');
        }

        return await step.endDialog();
    }
}

export default AuthDialog;

我有一个连接到 luis 的主 dailog，并根据识别的意图执行相应的代码：

对于前任我在某些情况下有这个：

case 'CalendarEvents':
                return stepContext.beginDialog('AuthDialog');
                const calendar = await new GraphClient('token').events();
                let eventsBuilder: string = '';
                // tslint:disable-next-line: prefer-for-of
                for (let index = 0; index < calendar.length; index++) {
                    const element = calendar[index];
                    eventsBuilder += '\r\n' + moment(element.start.dateTime).format('dddd, MMMM Do YYYY, h:mm:ss a') + ' - ' + element.subject;
                }
                await step.context.sendActivity(`${eventsBuilder}`);

因此，如果意图是 CalendarEvents，则进行身份验证，然后进行一些图形 api 调用。

我目前遇到的问题是对图 api 的调用是在身份验证完成之前进行的，我希望首先进行用户身份验证，然后接收一些令牌并使用该令牌获取图 api 来电！

知道如何实现上述目标吗？

Answer 1

请看Graph Auth Sample。特别是，

它在 MainDialog 中获取令牌：

return step.beginDialog(OAUTH_PROMPT);

[...]

if (step.result) {
    const tokenResponse = step.result;
    if (tokenResponse && tokenResponse.token) {
        const parts = (step.values.command || '').toLowerCase().split(' ');

        const command = parts[0];

        switch (command) {
        case 'me':
            await OAuthHelpers.listMe(step.context, tokenResponse);
            break;
        case 'send':
            await OAuthHelpers.sendMail(step.context, tokenResponse, parts[1]);
            break;
        case 'recent':
            await OAuthHelpers.listRecentMail(step.context, tokenResponse);
            break;
        default:
            await step.context.sendActivity(`Your token is ${ tokenResponse.token }`);
        }
    }
}

[...]

然后，OAuthHelpers 使用令牌：

static async sendMail(context, tokenResponse, emailAddress) {
    [...]
    const client = new SimpleGraphClient(tokenResponse.token);
    const me = await client.getMe();

    await client.sendMail(
        emailAddress,
        'Message from a bot!',
        `Hi there! I had this message sent from a bot. - Your friend, ${ me.displayName }`
    );
    await context.sendActivity(`I sent a message to ${ emailAddress } from your account.`);
}

这就是示例的工作原理。对于您来说，由于您只想在 Auth 对话框中进行身份验证，因此您需要使用 Auth 对话框从用户那里获取令牌，然后将其保存到他们的 UserState，类似于 this sample。然后您可以在任何对话框中检索他们的 UserState 并使用他们拥有的令牌。

备注

您可以像示例一样通过常规 HTTP REST API requests, or use the Graph SDK 使用图表 API。

Botframework 如何首先进行身份验证，然后使用令牌进行图形 api 调用

Botframework how to authenticate first and than use the token to make graph api calls

node.js

botframework

azure-bot-service

备注