AuthorizationCodeCredential provider for graph sdk

Question

AuthorizationCodeCredential provider for graph sdk

Anonymous

I am trying to use the AuthorizationCodeCredential from https://learn.microsoft.com/en-us/graph/sdks/choose-authentication-providers?tabs=Java#authorization-code-provider.

Where does the authorization code value come in from? Does the use have to interactively via a webpage invoke the /authorize endpoint, we have to cache the code value and then build out this provider?

Once its built out, do we get the access and refresh tokens for free? Do we then need to do anything to keep them alive?

Shashi Shailaj 7,651 Reputation points Microsoft Employee Moderator

2021-12-13T14:01:45.747+00:00

@Anonymous ,
Hope you are doing great . Just checking if you have any further queries on this thread. In case the information provided is helpful , please do accept the thread as answer for the benefit of others in the community . If you still have any doubts , please let us know and we will be happy to help .

Thank you.
Shweta Mathur 30,456 Reputation points Microsoft Employee Moderator

2021-12-28T05:24:00.247+00:00

Hi @Anonymous ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Thanks,
Shweta

1 answer

Your answer

Shashi Shailaj 7,651 Reputation points Microsoft Employee Moderator

2021-12-13T14:01:45.747+00:00

@Anonymous ,
Hope you are doing great . Just checking if you have any further queries on this thread. In case the information provided is helpful , please do accept the thread as answer for the benefit of others in the community . If you still have any doubts , please let us know and we will be happy to help .

Thank you.
Shweta Mathur 30,456 Reputation points Microsoft Employee Moderator

2021-12-28T05:24:00.247+00:00

Hi @Anonymous ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Thanks,
Shweta

Answer 1

Shweta Mathur 30,456 Microsoft Employee Moderator

Hi @Anonymous

Azure AD authorization code flow requires user interaction to authenticate the user and get Authorization code using /authorize endpoint.
AuthorizationCodeCredential require prefetched authorization code which you can get from the query parameter in redirect URL specified while calling /authorize endpoint.

You can extract that query parameter and pass in AuthorizationCodeCredential to get the access and refresh token.

Authorization Code is a temporary code that is valid for a very short time and is intended only for receiving an AccessToken and RefreshToken. There is no need to store it. If you need to get new access token after access token expire, you don’t need code . You can use refresh token this time to get active access token.

Refer https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-auth-code-flow for authorize endpoint and code and tokens formats.

Hope this helps.

Thanks,
Shweta

Anonymous

2021-12-10T13:27:31.8+00:00

So the graph client that uses the AuthorizationCodeCredential , does it automatically get new access tokens when the current one expires? Who maintains that lifecycle?
Shweta Mathur 30,456 Reputation points Microsoft Employee Moderator

2021-12-12T15:47:24.287+00:00

Hi @Anonymous ,

Microsoft provide Microsoft Authentication Library (MSAL) to acquire tokens from the Microsoft identity platform to authenticate users and give us many ways to handle the tokens.

Access tokens are short lived and expire in one hour. On subsequent calls it will return cached access token or redeem a refresh token without requiring the user to sign in again.

After access token expires, MSAL.NET abstracts the concept of refresh token to get new access token using serialize TokenCache to preserve credentials.

See AcquireTokenSilentAsync using a cached token and Token cache serialization in MSAL.NET for more details.

The lifetimes of refresh tokens are relatively long. However, in some cases, refresh tokens expire, are revoked. Then you application should handle the error gracefully and prompt user to sign in again and acquired a refresh token upon redeeming the authorization code.

Hope this helps.

Shweta

----------------------------------------------------------------------------------

Please remember to "Accept Answer" if answer helped you.

Share via

AuthorizationCodeCredential provider for graph sdk

1 answer

Your answer