【Azure Developer】使用Microsoft Graph API創建用戶時候遇見「401 : Unauthorized」「403 : Forbidden」

2021 年 1 月 30 日
筆記
「401 : Unauthorized」「403 : Forbidden」, 【Azure Developer】, Azure Developer, Microsoft Graph創建用戶

問題描述

編寫Java代碼調用Mircrosoft Graph API創建用戶時，分別遇見了「401 : Unauthorized」和「403 : Forbidden」錯誤，調用的Java代碼片段如下：

選擇 Microsoft Graph 身份驗證

ClientCredentialProvider authProvider = new ClientCredentialProvider(
                                                    clientId,
                                                    scopes,
                                                    clientSecret,
                                                    tenant,
                                                    NationalCloud.Global);

創建用戶

IGraphServiceClient graphClient = GraphServiceClient.builder().authenticationProvider( authProvider ).buildClient();

User user = new User();
user.accountEnabled = true;
user.displayName = "Adele Vance";
user.mailNickname = "AdeleV";
user.userPrincipalName = "[email protected]";
PasswordProfile passwordProfile = new PasswordProfile();
passwordProfile.forceChangePasswordNextSignIn = true;
passwordProfile.password = "xWwvJ]6NMw+bWH-d";
user.passwordProfile = passwordProfile;

graphClient.users()
    .buildRequest()
    .post(user);

解決辦法

401：Unauthorized

因在代碼中使用的環境為NationalCloud.Global，所以需要修改為NationalCloud.China。開啟Debug模式，在對象graphClient中，發現Post請求的URL地址為//graph.microsoft.com/v1.0/users，而這個地址為Global環境的Endpoint，需要修改為中國區的地址：//microsoftgraph.chinacloudapi.cn/v1.0/users。

修改後的代碼為：

ClientCredentialProvider authProvider = new ClientCredentialProvider(
                                                    clientId,
                                                    scopes,
                                                    clientSecret,
                                                    tenant,
                                                    NationalCloud.China);

IGraphServiceClient graphClient = GraphServiceClient.builder().authenticationProvider( authProvider ).buildClient();

User user = new User();
user.accountEnabled = true;
user.displayName = "Adele Vance";
user.mailNickname = "AdeleV";
user.userPrincipalName = "[email protected]";
PasswordProfile passwordProfile = new PasswordProfile();
passwordProfile.forceChangePasswordNextSignIn = true;
passwordProfile.password = "xWwvJ]6NMw+bWH-d";
user.passwordProfile = passwordProfile;

graphClient.setServiceRoot("//microsoftgraph.chinacloudapi.cn/v1.0");
graphClient.users()
    .buildRequest()
    .post(user);