hajekj
commented
5 years ago Hey, what is the message that is accompanying the 401? Can you maybe dump the error message and post it here.
From: Sam-digitalife notifications@github.com
Sent: Friday, June 28, 2019 3:50:30 PM
To: TheNetworg/oauth2-azure
Cc: Subscribed
Subject: [TheNetworg/oauth2-azure] Client error: GET https://graph.microsoft.com/v1.0/me resulted in a 401 Unauthorized response - InvalidAuthenticationToken - Access token validation failure (#87)
Hi all, Since few days I try to use the token received with Oauth2-Client with MSGraph but till now I always get the same issue. 401 unauthorized. I'm able to get the token and query azure AD to get user details. but when I give the token to MSGraph I always get 401 Unauthorized :-/ Any idea ?
// Set up a new Oauth2 client that will be talking to Azure $provider = new TheNetworg\OAuth2\Client\Provider\Azure([ 'clientId' => CLIENT_ID, 'clientSecret' => CLIENT_SECRET, 'redirectUri' => REDIRECT_URI, ]);
if (!isset($_GET['code'])) {
// If we don't have an authorization code then get one $authUrl = $provider->getAuthorizationUrl(); $_SESSION['oauth2state'] = $provider->getState(); header('Location: '.$authUrl); exit;
// Check given state against previously stored one to mitigate CSRF attack } elseif (empty($_GET['state']) || ($_GET['state'] !== $_SESSION['oauth2state'])) {
unset($_SESSION['oauth2state']); exit('Invalid state');
} else {
// Try to get an access token (using the authorization code grant)
$token = $provider->getAccessToken('authorization_code', [
'code' => $_GET['code'],
'resource' => 'https://graph.microsoft.com',
'urlAPI' => 'https://graph.microsoft.com/v1.0/',
]);
echo '
Token: '.$token.'!
';
// Use this to interact with an API on the users behalf
//echo $token->getToken();
// Optional: Now you have a token you can look up a users profile data try {
// We got an access token, let's now get the user's details
$me = $provider->get("me", $token);
// Use these details to create a new profile
printf('<br>Hello %s!', $me['displayName']);
$resourceOwner = $provider->getResourceOwner($token);
echo '<br>Tenant: '.$resourceOwner->getTenantId().'!<br>';
$graph = new Graph();
$graph->setBaseUrl("https://graph.microsoft.com/") ->setApiVersion("v1.0") ->setAccessToken($token);
$user = $graph->createRequest("get", "/me")
->addHeaders(array("Content-Type" => "application/json"))
->setReturnType(Model\User::class)
->setTimeout("1000")
->execute();} catch (Exception $e) {
//Failed to get user details
echo 'Caught exception: ', $e->getMessage(), "\n";
exit('<br>Oh dear...');}
}
— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHubhttps://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FTheNetworg%2Foauth2-azure%2Fissues%2F87%3Femail_source%3Dnotifications%26email_token%3DAB7TT6OIT4V7HD2E56BRJSLP4YJKNA5CNFSM4H4FRPO2YY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4G4KH36Q&data=02%7C01%7Cjan.hajek%40thenetw.org%7C100642b5679d4201eae408d6fbcf9633%7C67266d438de7494d9ed83d1bd3b3a764%7C1%7C0%7C636973266342806302&sdata=Bf2Z4s0yvMKDYyuoZ8BCziLSN72VSEkXuo3fVRMAybU%3D&reserved=0, or mute the threadhttps://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAB7TT6M23FVFYPNQW2PNKZDP4YJKNANCNFSM4H4FRPOQ&data=02%7C01%7Cjan.hajek%40thenetw.org%7C100642b5679d4201eae408d6fbcf9633%7C67266d438de7494d9ed83d1bd3b3a764%7C1%7C0%7C636973266342816311&sdata=59YiN13fZiI3a%2F49qtMEc3ykD100N2ro0dMbgs56LFw%3D&reserved=0.
Sam-digitalife
Hi all, Since few days I try to use the token received with Oauth2-Client with MSGraph but till now I always get the same issue. 401 unauthorized. I'm able to get the token and query azure AD to get user details. but when I give the token to MSGraph I always get 401 Unauthorized :-/ Any idea ?
// Set up a new Oauth2 client that will be talking to Azure $provider = new TheNetworg\OAuth2\Client\Provider\Azure([ 'clientId' => CLIENT_ID, 'clientSecret' => CLIENT_SECRET, 'redirectUri' => REDIRECT_URI, ]);
if (!isset($_GET['code'])) {
// Check given state against previously stored one to mitigate CSRF attack } elseif (empty($_GET['state']) || ($_GET['state'] !== $_SESSION['oauth2state'])) {
} else {
}