c# - Microsoft Graph, some users: AuthenticationFailure, Caller needs to authenticate -
we have built microsoft mvc application using microsoft graph owin oauth authentication. seems work users there small amount of users silent token not working.
every time user try access microsoft graph authenticationfailure, caller needs authenticate user can sign in.
for reason user can access 1 drive without doing few days ago did not work. person can't access sharepoint sites. person have higher permission me, 1 of office 365/sharepoint admin.
if check token cache updated users when try login again , have tried delete caches see if works.
we can't find wrong code.
not working:
{ typ: "jwt", nonce: "aqabaaaaaaa9ktklhvy7sjtgazr-p1bczrtr_wq7mcwtsbpfo4aecokkdbsoz1i6087v4nybvi1qnydsvob1vvdentdl9ekv_det7ozvbatohjhjdglplcaa", alg: "rs256", x5t: "vwvic1wd1tksbb301sasm5koq5q", kid: "vwvic1wd1tksbb301sasm5koq5q" }. { aud: "https://graph.microsoft.com", iss: "https://sts.windows.net/guid/", iat: 1503302799, nbf: 1503302799, exp: 1503306699, acr: "1", aio: "y2fgyegimx+jxi7wfvivjq/tp+ltb3+1+dhvdybllxxeqpnsvc4a", amr: [ "pwd" ], app_displayname: "app", appid: "f53962c3-2bd4-4302-adcf-49d9a93ccef0", appidacr: "1", deviceid: "08c173b6-e694-4df7-9009-33d1bcd4816a", e_exp: 262800, family_name: "last name", given_name: "first name", ipaddr: "217.10.98.37", name: "first name last name", oid: "794781b4-0d07-45ba-886b-39de7db6cb26", platf: "3", puid: "10037ffe822df7ce", scp: "files.read files.readwrite files.readwrite.all files.readwrite.appfolder sites.read.all user.read", signin_state: [ "kmsi" ], sub: "awdo_-umhsb5z9_3_nzzxt0b9rahxf4wjdqyydindnw", tid: "34e9a1f3-23e1-4ead-b2fd-41660c25cc47", unique_name: "firstname.lastname@company.com", upn: "firstname.lastname@company.com", uti: "vs8dt5ti8uc-mfwzw9w4aa", ver: "1.0", wids: [ "62e90394-69f5-4237-9190-012177145e10" ] }. working:
{ typ: "jwt", nonce: "aqabaaaaaaa9ktklhvy7sjtgazr-p1bc8syqkfxauuqmf53lfeersj2wrzdui3dnk5beyrzqn2n6wbbg6m01aely4d3mbvs5f6veat7zzhhxh4a-76fjmiaa", alg: "rs256", x5t: "vwvic1wd1tksbb301sasm5koq5q", kid: "vwvic1wd1tksbb301sasm5koq5q" }. { aud: "https://graph.microsoft.com", iss: "https://sts.windows.net/guid/", iat: 1503302938, nbf: 1503302938, exp: 1503306838, acr: "1", aio: "asqa2/8eaaaa29tpgrdnkbs6xebrv4up2ap1cs5uk8q8f6w/s9bdzaa=", amr: [ "pwd" ], app_displayname: "app", appid: "f53962c3-2bd4-4302-adcf-49d9a93ccef0", appidacr: "1", e_exp: 262800, family_name: "last name", given_name: "first name", ipaddr: "217.10.98.37", name: "first name last name", oid: "4f64d4db-8115-4f19-8554-bedf20688226", platf: "3", puid: "1003bffd8cbee8be", scp: "files.read files.readwrite files.readwrite.all files.readwrite.appfolder sites.read.all user.read", signin_state: [ "kmsi" ], sub: "qrnv0lz7zbfktpm9ejdavezilp96uig45ppfxhrp3gk", tid: "34e9a1f3-23e1-4ead-b2fd-41660c25cc47", unique_name: "firstname.lastname@company.com", upn: "firstname.lastname@company.com", uti: "d9wdlyw2ue2udil6u9bkaa", ver: "1.0" }. we using code from: https://github.com/microsoftgraph/aspnet-connect-sample
here little bit of background: microsoft graph, upload sharepoint drive: caller not authenticated
Comments
Post a Comment