asp.net Webapi登录azureAD并调用azure graph api

1. 需要安装的包：
Microsoft.Azure.ActiveDirectory.GraphClient
Microsoft.IdentityModel.Clients.ActiveDirectory

C# 实例包含：
1. 使用用户名密码登录获取accesstoken和idtoken
2. 使用idtoken获取idtoken和accesstoken
3. 调用graphapi获得更多信息

internal class AzureADGlobalConstants    {        public const string AuthString = "https://login.microsoftonline.com/";        public const string ResourceUrl = "https://graph.windows.net";        public const string GraphServiceObjectId = "00000002-0000-0000-c000-000000000000";    }    public class CertisAdLoginController : ApiController    {        public class LoginResult        {            public bool IsSuccess { get; set; }            public string ErrorMessage { get; set; }            public object Data { get; set; }            public IUser UserDetail { get; set; }        }        internal class AzureADAppConstants        {            /// <summary>            /// The application id ,you can login to azure portal ->            /// Azure Active Directory ->            /// Registered Apps -> click the app            /// </summary>            public const string ClientId = "your_app_id";            /// <summary>            /// Login to your azure portal ->            /// Azure Active Directory ->            /// Registered Apps -> click the app             /// keys -> add new            /// </summary>            public const string ClientSecret = "your_app_key";            /// <summary>            /// this is used to construct the login user name:            /// e.g.  [e-mail]            /// </summary>            public const string TenantName = "[e-mail]";            /// <summary>            /// you can get this value form below steps :            /// Login to your azure portal ->            /// Azure Active Directory ->            /// Properties -> DirectoryId            /// </summary>            public const string TenantId = "your_tenant_id";        }        /// <summary>        /// Login with idToken        /// </summary>        /// <param name="idToken"></param>        /// <returns></returns>        [HttpPost]        public IHttpActionResult Login(string idToken)        {            try            {                string directoryName = AzureADAppConstants.TenantName;                string clientId = AzureADAppConstants.ClientId;                var credentials = new UserAssertion(idToken);                var authenticationContext = new AuthenticationContext(AzureADGlobalConstants.AuthString + directoryName);                var result = authenticationContext.AcquireTokenAsync(AzureADGlobalConstants.ResourceUrl, clientId, credentials).Result;                var tokenGetter = Task.Run(() => { return result.AccessToken; });                // get more details                var userDetail = GetUserDetailById(tokenGetter, result.UserInfo.UniqueId);                return Ok(new LoginResult()                {                    IsSuccess = true,                    Data = result,                    ErrorMessage = "",                    UserDetail = userDetail                });            }            catch (Exception ex)            {                return Ok(new LoginResult()                {                    IsSuccess = false,                    ErrorMessage = ex.Message                });            }        }        /// <summary>        /// Login with username/password        /// </summary>        /// <param name="username"></param>        /// <param name="password"></param>        /// <returns></returns>        [HttpPost]        public IHttpActionResult Login(string username, string password)        {            try            {                string directoryName = AzureADAppConstants.TenantName;                string clientId = AzureADAppConstants.ClientId;                var credentials = new UserPasswordCredential(string.Format("{0}@{1}", username, directoryName), password);                var authenticationContext = new AuthenticationContext(AzureADGlobalConstants.AuthString + directoryName);                var result = authenticationContext.AcquireTokenAsync(AzureADGlobalConstants.ResourceUrl, clientId, credentials).Result;                var tokenGetter = Task.Run(() => { return result.AccessToken; });                // get more details                var userDetail = GetUserDetailById(tokenGetter, result.UserInfo.UniqueId);                return Ok(new LoginResult()                {                    IsSuccess = true,                    Data = result,                    ErrorMessage = "",                    UserDetail = userDetail                });            }            catch (Exception ex)            {                return Ok(new LoginResult()                {                    IsSuccess = false,                    ErrorMessage = ex.Message                });            }        }        private IUser GetUserDetailById(Task<string> accessToken, string userid)        {            Uri servicePointUri = new Uri(AzureADGlobalConstants.ResourceUrl);            Uri serviceRoot = new Uri(servicePointUri, CertisAdLoginController.AzureADAppConstants.TenantId);            ActiveDirectoryClient client = new ActiveDirectoryClient(serviceRoot, () =>             {                 return accessToken;             });            IUser firstMatch = null;            try            {                IUserCollection userCollection = client.Users;                firstMatch = userCollection.Where(user =>                    user.ObjectId == userid)                    .Take(10).ExecuteAsync().                    Result.CurrentPage.First();                return firstMatch;            }            catch (Exception e)            {                return null;            }        }    }

完整示例：
https://github.com/iorilan/WebApiAzureADSample