Status Code: 0 Microsoft.Graph.ServiceException: Code: generalException #1602
Comments
jmprieur
added
regression
|
|
This is a Web API project. Sorry, no public repo :( Usual configuration in the startup The method that blows up is: ....... irrelevant code removed... //this line blows up when using 1.22.0 or 1.22.1 |
|
Same issue here. In general, whatever that requires an ITokenAcquisition is not working fine. In my case, also downgrading to 1.21.1 fixes the issue. Can´t provide a public repo right now, but could do it soon if required, however, my setup is also quite "standard", following this sample: https://github.com/Azure-Samples/active-directory-aspnetcore-webapp-openidconnect-v2/tree/master/4-WebApp-your-API/4-3-AnyOrg/ (using .net6 as @JRawlins737, but all works good with 1.21.1) |
|
Just adding a new finding. builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
.AddMicrosoftIdentityWebApi(builder.Configuration, "AzureAd")
.EnableTokenAcquisitionToCallDownstreamApi()
.AddMicrosoftGraph(builder.Configuration.GetSection("MicrosoftGraph"))
.AddDistributedTokenCaches();It works fine. However, in my scenario, I want to validate the Tenant in the token, so I´m doing: builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
.AddMicrosoftIdentityWebApi(options =>
{
builder.Configuration.Bind("AzureAd", options);
options.Events = new JwtBearerEvents
{
OnTokenValidated = async context =>
{
string[] allowedTenants = {
"TENANT1_ID",
"TENANT2_ID"
};
string? tenantId = context.Principal?.Claims.FirstOrDefault(x => x.Type is "tid" or "http://schemas.microsoft.com/identity/claims/tenantid")?.Value;
if (!allowedTenants.Contains(tenantId))
{
throw new Exception("This tenant is not authorized");
}
}
};
}, options => { builder.Configuration.Bind("AzureAd", options); })
.EnableTokenAcquisitionToCallDownstreamApi(options =>
{
builder.Configuration.Bind("AzureAd", options);
})
.AddMicrosoftGraph(builder.Configuration.GetSection("MicrosoftGraph"))
.AddDistributedTokenCaches();Previous setup fails with 1.22.1, but works with 1.21.1. Note that the setup that works in 1.22.1, the AddMicrosoftIdentityWebApi is returning a MicrosoftIdentityWebApiAuthenticationBuilderWithConfiguration, but the failing setup, the AddMicrosoftIdentityWebApi is returning a MicrosoftIdentityWebApiAuthenticationBuilder |
|
@JRawlins737 @luismanez : do you want to try the version which is in master currently. We think we fixed it. |
|
Works for me... :) thanks |
|
Thanks for confirming, @JRawlins737 ! |
|
I´m having some issues manually adding the .dlls to my project, so will wait for the release. However, I´ve seen the library is not targeting .NET6. Is there any reason? <TargetFrameworks>netcoreapp3.1; net462; net472; net5.0</TargetFrameworks>Thanks! |
|
The .NET 5.0 version works perfectly with .NET 6.0, @luismanez |
|
fixed in 1.22.3 release |
|
Have the issue here as well. Setup: Azure AD B2C Packages: <PackageReference Include="Microsoft.Identity.Web" Version="2.17.4" />
<PackageReference Include="Microsoft.Identity.Web.MicrosoftGraph" Version="2.17.4" />App Settings: {
"AzureAdB2C": {
"Instance": "https://mytenant.b2clogin.com",
"Domain": "mytenant.onmicrosoft.com",
"TenantName": "mytenant",
"TenantId": "guid",
"ClientId": "guid",
"ClientSecret": "qwerty123",
"SignUpSignInPolicyId": "b2c_1_signup_signin",
"MicrosoftGraph": {
"BaseUrl": "https://graph.microsoft.com/v1.0",
"Scopes": "https://graph.microsoft.com/.default User.ReadWrite.All"
}
}
}Not working: services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
.AddMicrosoftIdentityWebApi(async options =>
{
Configuration.Bind("AzureAdB2C", options);
var tenantName = Configuration.GetValue<string>("AzureAdB2C:TenantName");
var tenantId = Configuration.GetValue<string>("AzreAdB2C:TenantId");
var flowName = Configuration.GetValue<string>("AzureAdB2C:SignUpSignInPolicyId");
var audience = Configuration.GetValue<string>("AzureAdB2C:ClientId");
options.TokenValidationParameters = new TokenValidationParameters()
{
// Rest of the code
};
options.Events = new JwtBearerEvents()
{
OnTokenValidated = async context => {
// Rest of the code
await Task.CompletedTask;
}
};
}, options => { Configuration.Bind("AzureAdB2C", options); })
// This is not working
.EnableTokenAcquisitionToCallDownstreamApi(options => {
options.ClientId = Configuration["AzureAdB2C:ClientId"];
options.ClientSecret = Configuration["AzureAdB2C:ClientSecret"];
options.TenantId = Configuration["AzureAdB2C:TenantId"];
})
.AddMicrosoftGraph(Configuration["AzureAdB2C:MicrosoftGraph"])
.AddInMemoryTokenCaches();But if I remove services.AddHttpClient();
services.AddScoped<GraphServiceClient>(serviceProvider =>
{
var scopes = new[] { "https://graph.microsoft.com/.default" };
var clientId = Configuration["AzureAdB2C:ClientId"];
var tenantId = Configuration["AzureAdB2C:TenantId"];
var clientSecret = Configuration["AzureAdB2C:ClientSecret"];
var options = new ClientSecretCredentialOptions
{
AuthorityHost = AzureAuthorityHosts.AzurePublicCloud,
};
var clientSecretCredential = new ClientSecretCredential(tenantId, clientId, clientSecret, options);
return new GraphServiceClient(clientSecretCredential, scopes);
}); |
Upgraded Microsoft.Identity.Web from Version 1.21.1. (where is has been working just fine for many weeks) to 1.22.0 then 1.22.1 resulting in the same error. Rolling back to 1.21.1 fixes the issue... Also update TargetFramework from .Net 5 to 6 but still errors out.
Error occurred during the first debug after NuGet updates of Microsoft.Identity.Web and Microsoft.Identity.Web.MicrosoftGraph when the following code was executed in a Web API project.
groupId's is of type
List<String>and contained 2 GUID's that map to 2 groups.The stack trace of the failure is here:
Expected behavior
The method would normally return a list groups that the current user is a member of..
Actual behavior
Throws exception above..
The text was updated successfully, but these errors were encountered: