Bot Framework Connector refresh MS Graph token

Benoit Dupont 61

Hello,

I'm building a Teams Bot using the Bot Framework REST API.

I can send a OAuthCard to the user to sign in and get the magic code back and exchange it for a Microsoft Graph token. Everything is working.

What I don't know is the correct way to refresh that token when it expires. Sending a new OAuth card to the user is not user-friendly. I'm sure there is a better way to do it. How ?

Thanks

romungi-MSFT 42,296 Reputation points Microsoft Employee

2023-01-18T07:18:37.6266667+00:00

This sample provides a solution with messaging extension but might need some setup to use the App though.
JimmyYang-MSFT 49,186 Reputation points Microsoft Vendor

2023-01-18T07:23:41.82+00:00

@Benoit Dupont

Teams tag is mianly focused on the general issue of Microsoft Teams troubleshooting. According to your description, your issue is related to Teams Bot development, which is not in our support scope. So I will remove teams tag from your thread. Thanks for your understanding!
Benoit Dupont 61 Reputation points

2023-01-31T17:27:43.9533333+00:00

Sorry for the delay.

I managed to implement the SSO functionality in Java.

I have one more concern regarding the token validity.

When I want to refresh it, do I need to send a new OAuth card for Teams to send me another token or there is another way like calling an endpoint?

If I receive an activity and the user token is expired, I need to send and listen for a new activity with the token. So my original activity with the data is "lost". Or do I need to put it somewhere in cache waiting for the new token to be sent?.

Thanks
Benoit Dupont 61 Reputation points

2023-01-31T17:38:21.17+00:00

I managed to make the sample work in Java and refresh the token with SSO enabled.

My concern is the flow to refresh the token. Do I have to send a new OAuth card to refresh the token? Like for the first sign in?

When I receive an activity to handle and the token in cache is not valid anymore do I have to send the new OAuth card? If yes I lose the activity to handle in the first place because I have to wait for the tokenEchange with the new token. And in this case I don't have my previous data in the activity.

Can I refresh the token synchronously so I can handle my activity and have a new token at the same time?
Meghana-MSFT 3,786 Reputation points Microsoft Vendor

2023-03-05T16:12:51.7+00:00

@Benoit Dupont - Could you please let us know if you are still facing this issue?

Benoit Dupont 61

Yes, I found out how to do it.

I just need to call the API to get a token every time I need it. While the user is signed in, the code is working.

@GET
		@Path(value = "api/usertoken/GetToken")
		public Response getUserToken(
				@HeaderParam(HttpHeaders.AUTHORIZATION) String token,
				@QueryParam("userId") String userId,
				@QueryParam("connectionName") String connectionName,
				@QueryParam("channelId") String channelId);