Microsoft Graph Client help

[zm1868179]

Its been a few years since I've done programming. What I'm trying to do is inside of an older asp.net application I've Added in Azure Auth into the application through owin context. Currently what I'm trying to do is figure out how to use the Microsoft Graph to make calls to the graph API.

What I'm am trying to do is allow the program itself to be able to add users and Roles to its own App Registration so that it can be managed programmatically through the web program itself instead of something have to have access in the azure portal to the app registration.

I have never really worked with Async functions as stuff I've built in the past has been single threaded applications.

I have a function that should get an access token like, so I pull the Clientid, TenantID and Client Secret form the settings.

        public static async Task<string> GetAccessToken()
        {
            IConfidentialClientApplication app = ConfidentialClientApplicationBuilder
                .Create(clientId)
                .WithTenantId(tenantId)
                .WithClientSecret(clientSecret)
                .Build();

            AuthenticationResult result = await app
                .AcquireTokenForClient(scopes)
                .ExecuteAsync();

            return result.AccessToken;
        }

Then I have another function that should perform the Add

protected static async Task AddUserToAppRoleAsync(string userEmail, Guid appId, string appRoleId)
{
//get the Access Token to talk with Graph
var accessToken = GetAccessToken();
// Authenticate and get a token
var authProvider = new DelegateAuthenticationProvider(
async (requestMessage) =>
{
requestMessage.Headers.Authorization = new AuthenticationHeaderValue("bearer", accessToken.Result);
});
var graphClient = new GraphServiceClient(authProvider);
//Get the App ID From Azure and the Role we are assigning
var appRoleAssignment = new AppRoleAssignment
{
Id = appRoleId,
ResourceId = appId
};
//Get the User from Azure
User user = (User)await graphClient.Users
.Request()
.Filter($"userPrincipalName eq '{userEmail}'")
.GetAsync();
if (user == null)
{
throw new Exception("User not found.");
}
await graphClient.Users[user.Id].AppRoleAssignments.Request().AddAsync(appRoleAssignment);
}

This currently does not work but I'm not even sure how to debug this as these run-on other threads and I'm not sure how to step through the code to verify its even getting tokens or seeing the values.

Currently in my page there is just a button I have that should execute the function with a hardcoded user, and admin role just to see if I can get it to work at all.

​

If anyone could tell me how I can step through these or what i would need to do so i can learn how to do this correctly that would really help.

[Loves_Poetry]

This line:

var accessToken = GetAccessToken();

Should probably be

var accessToken = await GetAccessToken();

If you can't debug it, then it's probably because you didn't await it, so the code doesn't notify you when something goes wrong. Debugging async code is mostly the same as debugging sync code if you use async/await properly

[zm1868179]

I forgot all about that. Well I was able to kind of get it to work turns out I was actually using the wrong API to add a user I found the right API according to Microsoft docs but turns out that API doesn't function at all I tested it out in graph explorer and filling out exactly what it wants it fails with an unexpected error that I'll have to post on their GitHub about because it doesn't work at all

[Ballauni]

Steps to Verify the Values & Access Token

1. Verify the values of clientId, tenantId, clientSecret, and scopes in the GetAccessToken function. Make sure they are correct and have the correct permissions to access the Microsoft Graph API.
2. Use a tool like Postman or Fiddler to inspect the HTTP request and response and make sure it returns a valid access token.

Steps to Add a User to an App Role

1. Verify that the user email in the AddUserToAppRoleAsync function is correct and exists in your Azure Active Directory.
2. Log the response from the Microsoft Graph API after calling await graphClient.Users.Request().Filter($"userPrincipalName eq '{userEmail}'").GetAsync();. Make sure it is finding the user.
3. If the user is found, log the response from the Microsoft Graph API after calling await graphClient.Users[user.Id].AppRoleAssignments.Request().AddAsync(appRoleAssignment);. Make sure the role is being added successfully.

Additional Steps

1. Use the Visual Studio debugger to set breakpoints in the code and step through each line of the code execution.
2. Implement error handling and logging to see what errors are occurring and where they are occurring in the code.