C#获取Microsoft Graph API授权及缓存管理 Token

Microsoft.Identity.Client.Extensions.Msal

using Microsoft.Identity.Client.Extensions.Msal;

var storageProperties =
     new StorageCreationPropertiesBuilder(Config.CacheFileName, Config.CacheDir)
     .WithLinuxKeyring(
         Config.LinuxKeyRingSchema,
         Config.LinuxKeyRingCollection,
         Config.LinuxKeyRingLabel,
         Config.LinuxKeyRingAttr1,
         Config.LinuxKeyRingAttr2)
     .WithMacKeyChain(
         Config.KeyChainServiceName,
         Config.KeyChainAccountName)
     .Build();

 IPublicClientApplication pca = PublicClientApplicationBuilder.Create(clientId)
    .WithAuthority(Config.Authority)
    .WithRedirectUri("http://localhost")  // make sure to register this redirect URI for the interactive login 
    .Build();
    

// This hooks up the cross-platform cache into MSAL
var cacheHelper = await MsalCacheHelper.CreateAsync(storageProperties );
cacheHelper.RegisterCache(pca.UserTokenCache);

storageProperties =
    new StorageCreationPropertiesBuilder(
        Config.CacheFileName + ".plaintext",
        Config.CacheDir)
    .WithUnprotectedFile()
    .Build();

var cacheHelper = await MsalCacheHelper.CreateAsync(storageProperties).ConfigureAwait(false);

internal static class Config
    {
        // App settings
        public static readonly string[] Scopes = new[] { "user.read" };

        // Use "common" if you want to allow any "enterprise" (work or school) account AND any user account (live.com, outlook, hotmail) to log in.
        // Use an actual tenant ID to allow only your enterprise to log in.
        // Use "organizations" to allow only enterprise log-in, this is required for the Username / Password flow
        public const string Authority = "https://login.microsoftonline.com/organizations";

        // DO NOT USE THIS CLIENT ID IN YOUR APP. WE REGULARLY DELETE THEM. CREATE YOUR OWN!
        public const string ClientId = "1d18b3b0-251b-4714-a02a-9956cec86c2d"; 

        // Cache settings
        public const string CacheFileName = "myapp_msal_cache.txt";
        public readonly static string CacheDir = MsalCacheHelper.UserRootDirectory;

        public const string KeyChainServiceName = "myapp_msal_service";
        public const string KeyChainAccountName = "myapp_msal_account";

        public const string LinuxKeyRingSchema = "com.contoso.devtools.tokencache";
        public const string LinuxKeyRingCollection = MsalCacheHelper.LinuxKeyRingDefaultCollection;
        public const string LinuxKeyRingLabel = "MSAL token cache for all Contoso dev tool apps.";
        public static readonly KeyValuePair<string, string> LinuxKeyRingAttr1 = new KeyValuePair<string, string>("Version", "1");
        public static readonly KeyValuePair<string, string> LinuxKeyRingAttr2 = new KeyValuePair<string, string>("ProductGroup", "MyApps");



    }

private async Task auth_()
{

    PublicClientApp = PublicClientApplicationBuilder.Create(client_id_tbx.Text)
    .WithDefaultRedirectUri()
    .WithAuthority(AzureCloudInstance.AzurePublic, "common")
    .Build();

    var cacheHelper = await MsalCacheHelper.CreateAsync(storageProperties);
    cacheHelper.RegisterCache(PublicClientApp.UserTokenCache);

    var accounts = await PublicClientApp.GetAccountsAsync();
    var firstAccount = accounts.FirstOrDefault();
    try
    {
        authResult = await PublicClientApp.AcquireTokenSilent(scopes, firstAccount)
        .ExecuteAsync();
        // authResult = await PublicClientApp.AcquireTokenInteractive(scopes).ExecuteAsync();
    }
    catch (MsalUiRequiredException ex)
    {
        // A MsalUiRequiredException happened on AcquireTokenSilent.
        // This indicates you need to call AcquireTokenInteractive to acquire a token
        System.Diagnostics.Debug.WriteLine($"MsalUiRequiredException: {ex.Message}");
        try
        {
            authResult = await PublicClientApp.AcquireTokenInteractive(scopes)
                .WithAccount(accounts.FirstOrDefault())
                .ExecuteAsync();
        }
        catch (MsalException msalex)
        {
            textBox1.AppendText(Environment.NewLine + $"Error Acquiring Token:{System.Environment.NewLine}{msalex}");
        }
    }
    catch (Exception ex)
    {
        System.Diagnostics.Debug.WriteLine($"Error Acquiring Token Silently:{System.Environment.NewLine}{ex}");
        return;
    }

    if (authResult != null)
    {
        MG_token.Tag = authResult.AccessToken;
        MG_token.Text = "成功";
        MG_token.BackColor = Color.Green;
    }
    else
    {
        MG_token.Text = "失败";
        MG_token.BackColor = Color.Red;
    }
}

cacheHelper.CacheChanged += (object sender, CacheChangedEventArgs args) =>
{
    Console.WriteLine($"Cache Changed, Added: {args.AccountsAdded.Count()} Removed: {args.AccountsRemoved.Count()}");
};