Dynamics365 WebAPI ADFS token 获取

 public class CrmAuth
     {
         ///<summary>
         /// Token
         /// </summary>
         public string access_token { get; set; }

         ///<summary>
         /// 类型
         /// </summary>
         public string token_type { get; set; }

         ///<summary>
         /// 有效期 秒
         /// </summary>
         public int expires_in { get; set; }

         ///<summary>
         /// refresh_Token 用于刷新Token
         /// </summary>
         public string refresh_token { get; set; }

         /// <summary>
         /// 请求Token
         /// </summary>
         /// <param name="adfsUri">ADFS地址</param>
         /// <param name="resource">CRM地址</param>
         /// <param name="clientId">客户端ID</param>
         /// <param name="redirectUri">跳转地址</param>
         /// <param name="userName">用户名</param>
         /// <param name="password">密码</param>
         /// <returns></returns>
         public static CrmAuth AcquireToken(string adfsUri, string resource, string clientId, string redirectUri, string userName, string password)
         {
             VerifyParams(adfsUri, resource, clientId, redirectUri, userName, password);

             var url = BuildCodeUrl(adfsUri, resource, clientId, redirectUri);

             var tokenUrl = BuildTokenUrl(adfsUri);

             var list = BuildCodeParams(userName, password);

             //包含上下文的 用WebRequest也可以
             using (var handler = new WebRequestHandler { AllowAutoRedirect = false })
             {
                 using (var httpClient = new HttpClient(handler))
                 {
                     //第1次请求
                     using (var response = httpClient.PostAsync(url, new FormUrlEncodedContent(list)).Result)
                     {
                         // 第2次请求 httpClient 还要用之前的 包含了第一次返回的Cookies
                         using (var response2 = httpClient.GetAsync(response.Headers.Location).Result)
                         {
                             // 获取返回的Code
                             var query = response2.Headers.Location.Query;
                             var col = Utils.GetQueryString(query);
                             var code = col["code"];
                             if (string.IsNullOrWhiteSpace(code))
                             {
                                 throw new Exception(query);
                             }
                             // 第3次请求 请求Token
                             var tokenParams = BuildTokenParams(clientId, code, resource, redirectUri);
                             using (var response3 = httpClient.PostAsync(tokenUrl, new FormUrlEncodedContent(tokenParams)).Result)
                             {
                                 var json = response3.Content.ReadAsStringAsync().Result;
                                 var auth = JsonConvert.DeserializeObject<CrmAuth>(json);
                                 if (auth == null)
                                     throw new Exception(json);
                                 return auth;
                             }

                         }
                     }
                 }
             }
         }

         /// <summary>
         /// 刷新Token
         /// </summary>
         /// <param name="adfsUri"></param>
         /// <param name="refresh_token"></param>
         /// <returns></returns>
         public static CrmAuth CrmRefreshToken(string adfsUri, string refresh_token)
         {
             var tokenUrl = BuildTokenUrl(adfsUri);
             using (var httpClient = new HttpClient())
             {
                 // 请求 请求Token
                 var tokenParams = BuildRefreshTokenParams(refresh_token);
                 using (var response3 = httpClient.PostAsync(tokenUrl, new FormUrlEncodedContent(tokenParams)).Result)
                 {
                     var json = response3.Content.ReadAsStringAsync().Result;
                     var auth = JsonConvert.DeserializeObject<CrmAuth>(json);
                     if (auth == null)
                         throw new Exception(json);
                     return auth;
                 }
             }
         }

         /// <summary>
         /// 验证参数
         /// </summary>
         /// <param name="adfsUri"></param>
         /// <param name="resource"></param>
         /// <param name="clientId"></param>
         /// <param name="redirectUri"></param>
         /// <param name="userName"></param>
         /// <param name="password"></param>
         private static void VerifyParams(string adfsUri, string resource, string clientId, string redirectUri, string userName, string password)
         {
             if (string.IsNullOrWhiteSpace(adfsUri))
                 throw new ArgumentNullException(nameof(adfsUri));
             if (string.IsNullOrWhiteSpace(nameof(resource)))
                 throw new ArgumentNullException(resource);
             if (string.IsNullOrWhiteSpace(clientId))
                 throw new ArgumentNullException(nameof(clientId));
             if (string.IsNullOrWhiteSpace(redirectUri))
                 throw new ArgumentNullException(nameof(redirectUri));
             if (string.IsNullOrWhiteSpace(userName))
                 throw new ArgumentNullException(nameof(userName));
             if (string.IsNullOrWhiteSpace(password))
                 throw new ArgumentNullException(nameof(password));
         }

         /// <summary>
         /// 构建ADFS CODE地址
         /// </summary>
         /// <param name="adfsUri"></param>
         /// <param name="resource"></param>
         /// <param name="clientId"></param>
         /// <param name="redirectUri"></param>
         /// <returns></returns>
         private static string BuildCodeUrl(string adfsUri, string resource, string clientId, string redirectUri)
         {

             if (!adfsUri.EndsWith("/"))
                 adfsUri = adfsUri + "/";
             var url = $"{adfsUri}adfs/oauth2/authorize";

             var response_type = "code";

             var sb = new StringBuilder();
             sb.Append(url);
             sb.Append("?");
             sb.Append($"response_type={response_type}");
             sb.Append("&");
             sb.Append($"client_id={clientId}");
             sb.Append("&");
             sb.Append($"redirect_uri={redirectUri}");
             sb.Append("&");
             sb.Append($"resource={resource}");
             url = sb.ToString();
             return url;
         }

         /// <summary>
         /// 构建ADFS TOKEN地址
         /// </summary>
         /// <param name="adfsUri"></param>
         /// <returns></returns>
         private static string BuildTokenUrl(string adfsUri)
         {
             return $"{adfsUri}adfs/oauth2/token";
         }

         /// <summary>
         /// 构建请求Code参数
         /// </summary>
         /// <param name="userName"></param>
         /// <param name="password"></param>
         /// <returns></returns>
         private static List<KeyValuePair<string, string>> BuildCodeParams(string userName, string password)
         {
             var list = new List<KeyValuePair<string, string>>()
             {
                 new KeyValuePair<string, string>("UserName",userName),
                 new KeyValuePair<string, string>("Password",password),
                 new KeyValuePair<string, string>("Kmsi","true"),
                 new KeyValuePair<string, string>("AuthMethod","FormsAuthentication")
             };
             return list;
         }

         /// <summary>
         /// 构建请求Token参数
         /// </summary>
         /// <param name="clientId"></param>
         /// <param name="code"></param>
         /// <param name="resource"></param>
         /// <param name="redirectUri"></param>
         /// <returns></returns>
         private static List<KeyValuePair<string, string>> BuildTokenParams(string clientId, string code, string resource, string redirectUri)
         {
             var list = new List<KeyValuePair<string, string>>
             {
                 new KeyValuePair<string, string>("grant_type", "authorization_code"),
                 new KeyValuePair<string, string>("client_id", clientId),
                 new KeyValuePair<string, string>("code", code),
                 new KeyValuePair<string, string>("resource", resource),
                 new KeyValuePair<string, string>("redirect_uri", redirectUri)
             };
             return list;
         }

         /// <summary>
         /// 构建请求刷新Token参数
         /// </summary>
         /// <param name="refresh_token"></param>
         /// <returns></returns>
         private static List<KeyValuePair<string, string>> BuildRefreshTokenParams(string refresh_token)
         {
             var list = new List<KeyValuePair<string, string>>
             {
                 new KeyValuePair<string, string>("grant_type", "refresh_token"),
                 new KeyValuePair<string, string>("refresh_token", refresh_token),
             };
             return list;
         }

     }

只对ADFS有效，Azure AD没用过应该不适用吧

主要就是模拟表单请求

redirectUri没有实际用户只是取返回的code,可以AllowAutoRedirect=true,返回在redirectUri内做code解析Token再返回

OAuthMessageHandler 单例HttpClient使用

RefreshToken请求返回来的没有 refresh_token 不知道为什么？

代码 :

https://github.com/JadynWong/Dynamics365WebAPIClient/blob/master/Standard/D365WebApiClient.Standard/Auth/Dynamics365Auth.cs

Configure Windows Server 2012 R2 for Dynamics 365 applications that use OAuth

参考

https://technet.microsoft.com/en-us/library/hh699726.aspx?f=255&MSPPError=-2147217396

http://www.cloudriven.fi/en/cloud-9-en/how-to-make-dynamics-365-web-api-queries-using-oauth/

https://msdn.microsoft.com/zh-cn/library/gg334767.aspx#bkmk_includeFormattedValues

流程

https://blog.scottlogic.com/2015/03/09/OAUTH2-Authentication-with-ADFS-3.0.html

原文地址：http://www.cnblogs.com/WJvsToo/p/8194288.html