Voir la source de Microsoft Graph

[[Category:Azure]]
= Liens =
* [https://blogs.msdn.microsoft.com/kaevans/2014/04/15/calling-o365-apis-from-your-web-api-on-behalf-of-a-user/ Calling O365 APIs from your Web API on behalf of a user]

= Description =
{{boxx|Microsoft Graph}} remplace {{boxx|Office 365 API}} et {{boxx|Azure AD Graph API}}.<br />
Il réunit au sein d'une unique API toutes les données relatives aux utilisateurs.
{| class="wikitable wtp" 
! Web-hosted resource
! Application ID URI
|-
| The Office 365 Unified Mail API || https://outlook.office.com
|-
| The Azure AD Graph API || https://graph.windows.net
|-
| Microsoft Graph || https://graph.microsoft.com
|}

= Permissions =
{{info | Base url {{boxx|https://graph.microsoft.com/v1.0}}<br />
L'erreur {{boxx|Access is denied. Check credentials and try again.}} signifie qu'il manque des permissions pour l'appel de la web API.}}
* [https://github.com/microsoftgraph/microsoft-graph-docs/blob/master/concepts/permissions_reference.md Mapping Permission - Display String]
{| class="wikitable wtp wtmono2" 
! Description
! Url
! Permissions
|-
| Profil de l'utilisateur courant || /me || Pas de permission nécessaire,<br />fonctionne même sans l'ajout de l'API Microsoft Graph dans les permissions.
|-
| [https://developer.microsoft.com/en-us/graph/docs/api-reference/v1.0/api/user_list Liste des profils des utilisateurs] || /users || Access directory as the signed in user
|-
| [https://developer.microsoft.com/en-us/graph/docs/api-reference/v1.0/api/profilephoto_get Photo]<br />beta || /users/<userId>/photo/$value || View users' basic profile<br />Read all users' basic profiles
|-
| [https://developer.microsoft.com/en-us/graph/docs/api-reference/v1.0/api/user_sendmail Envoyer un email] || POST /me/sendMail || Send mail as a user<br />Nécessite Outlook on the web (Exchange Web Connect, Outlook Web Access OWA)<br />Sinon erreur {{boxx|Resource could not be discovered}}
|-
| [https://developer.microsoft.com/en-us/graph/docs/api-reference/v1.0/api/user_list_events Événements du calendrier] || /me/events<br />/users/<userId>/events || Read user calendars
|-
| Accès aux configuration InTune<br />beta || /me/managedDevices || Read Microsoft Intune apps (DeviceManagementApps.Read.All)
|}

= Converged vs Azure AD applications =
[https://github.com/Microsoft/Office365APIEditor/issues/3 Graph] ne fonctionne qu'avec des {{boxx|Converged apps}} et pas avec des {{boxx|AAD apps}}.<br />
Les Converged apps sont a enregistrer sur [https://apps.dev.microsoft.com apps.dev.microsoft.com]

= [https://developer.microsoft.com/en-us/graph/docs/concepts/query_parameters#filter-parameter Filtres sur les requêtes] =
{| class="wikitable wtp wtmono1" 
! Exemples
|-
| users?$filter=givenName eq 'Nicolas' and surname eq 'XXX')
|-
| users?$filter=startswith(givenName,'Nicolas')
|-
| me/events?$filter=start/dateTime ge '2009-06-15T13:45:30'
|-
| users?$top=999
|-
| users?$select=givenName,surname
|-
| me/events?$orderby=start/dateTime
|}
{{info | Utiliser {{boxx|HttpUtility.UrlEncode}} pour encoder le contenu du filtre.}}

= [https://msdn.microsoft.com/office/office365/APi/video-rest-operations#ChanneloperationsGetinformationaboutaparticularchannel Video REST API] =
{| class="wikitable wtp wtmono1" 
! URL
! Description
|-
| <nowiki>https://xxx.sharepoint.com/portals/hub/_api/VideoService/Channels</nowiki> || Liste des channels
|-
| <nowiki>https://xxx.sharepoint.com/portals/hub/_api/VideoService/Channels/(guid'xxx')/Videos(guid'xxx')/ThumbnailStream</nowiki> || Thumbnail
|}
* [https://blogs.technet.microsoft.com/sharepointdevelopersupport/2017/11/17/retrieving-thumbnails-using-video-rest-api/ Retrieving thumbnails using Video REST API]

= [https://www.nuget.org/packages/Microsoft.Graph Microsoft.Graph client library] =
* package Nuget {{boxx|Microsoft.Graph}}
<kode lang='csharp'>
var graphClient = new GraphServiceClient(
        "https://graph.microsoft.com/v1.0",
        new DelegateAuthenticationProvider(
            async (requestMessage) =>
            {
                var token = TokenGraph;
                requestMessage.Headers.Authorization = new AuthenticationHeaderValue("bearer", token);
                await Task.FromResult("");
            }));

// User Me
var user = await graphClient.Me.Request().GetAsync();
string userId = user.Id;
</kode>
* [http://blog.jonathanhuss.com/intro-to-the-microsoft-graph-net-client-library/ Intro to the Microsoft Graph .NET Client Library]
== [https://github.com/Mimetis/NextMeetingsForGraphSample NextMeetingsForGraphSample] ==
<kode lang='csharp'>
var start = DateTime.UtcNow.ToString("o");
var end = DateTime.UtcNow.AddDays(7).ToString("o");

var optionStart = new QueryOption("startDateTime", start);
var optionEnd = new QueryOption("endDateTime", end);

IUserCalendarViewCollectionPage calendarView = await graphService.Me.CalendarView.Request(new[] { optionStart, optionEnd }).GetAsync();

var hasMorePages = true;
var events = new List<Event>();
while (hasMorePages)
{
    foreach (var ev in calendarView.CurrentPage.ToList())
        events.Add(ev);
    hasMorePages = calendarView.NextPageRequest != null;
    if (hasMorePages)
        calendarView = await calendarView.NextPageRequest.GetAsync();
}

foreach (var ev in events) {}
</kode>

= WPF client =
== Avec un token Azure AD ==
<filebox fn='MainWindows.xaml.cs' collapsed>
private string _clientId = "xxx";
private static string _tenant = "xxx.onmicrosoft.com";
private string _authority = $"https://login.microsoftonline.com/{_tenant}";

private string _graphResourceUrl = "https://graph.microsoft.com";
private string _resourceUrl = "https://xxx.onmicrosoft.com/xxx";

private Uri _redirectUri = new Uri("https://wpfclient");
string[] scopes = new string[] { "user.read" };

private HttpClient _httpClient = new HttpClient();
private string _token;
private string _tokenGraph;

private async void signin_Click(object sender, RoutedEventArgs e)
{
    AuthenticationContext authContext = new AuthenticationContext(_authority);
    AuthenticationResult authResult = null;

    try
    {
        authResult = await authContext.AcquireTokenAsync(_resourceUrl, _clientId, _redirectUri, new PlatformParameters(PromptBehavior.Auto));
        _token = authResult.AccessToken;
        AppendText("You signed in!");
    }
    catch (AdalException aex)
    {
        AppendText(aex.ToString());
    }
}

// get the token graph automatically if the azure AD is already in the cache
private async void tokengraph_Click(object sender, RoutedEventArgs e)
{
    AuthenticationContext authContext = new AuthenticationContext(_authority);
    AuthenticationResult authResult = null;

    try
    {
        authResult = await authContext.AcquireTokenSilentAsync(_graphResourceUrl, _clientId);
        _tokenGraph = authResult.AccessToken;
        AppendText("You got the token for the graph!");
    }
    catch (AdalException aex)
    {
        AppendText(aex.ToString());
    }
}

// use the token graph to request the graph
private async void profile_Click(object sender, RoutedEventArgs e)
{
    string url = "https://graph.microsoft.com/v1.0/me";

    if (_tokenGraph != null)
    {
        HttpResponseMessage response;
        try
        {
            var request = new HttpRequestMessage(HttpMethod.Get, url);
            request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", _tokenGraph);
            response = await _httpClient.SendAsync(request);
            var content = await response.Content.ReadAsStringAsync();
            AppendText(content);
        }
        catch (Exception ex)
        {
            AppendText(ex.ToString());
        }
    }
    else
    {
        AppendText("You need to get the token graph first.");
    }
}
</filebox>

== Avec Microsoft.Identity.Client ==
Packages Nuget:
* {{boxx|Microsoft.Identity.Client}}
<filebox fn='MainWindows.xaml.cs' collapsed>
// config
// client ID de Converged applications.
// ne fonctionne pas avec les client ID des AAD applications
// AADSTS70001: Application is not supported for this API version.
private string _clientId = "xxx";
private static string _tenant = "xxx.onmicrosoft.com";
private string _authority = $"https://login.microsoftonline.com/{_tenant}";
// Set the scope for API call to user.read
string[] scopes = new string[] { "user.read" };

private PublicClientApplication _clientApp;
Microsoft.Identity.Client.AuthenticationResult authResult = null;
private HttpClient _httpClient = new HttpClient();

public MainWindow()
{
    InitializeComponent();
    _clientApp = new PublicClientApplication(_clientId, _authority, TokenCacheHelper.GetUserCache());
}

private async void signin_Click(object sender, RoutedEventArgs e)
{
    try
    {
        authResult = await _clientApp.AcquireTokenSilentAsync(scopes, _clientApp.Users.FirstOrDefault());
        AppendText("Signed-in using the cache.");
    }
    catch (MsalUiRequiredException ex)
    {
        try
        {
            authResult = await _clientApp.AcquireTokenAsync(scopes);
            AppendText("Signed-in successfully.");
        }
        catch (MsalException msalex)
        {
            AppendText($"Error Acquiring Token:\n{msalex}");
        }
    }
    catch (Exception ex)
    {
        AppendText($"Error Acquiring Token Silently:\n{ex}");
        return;
    }
}

private void signout_Click(object sender, RoutedEventArgs e)
{

}

private async void getProfile_Click(object sender, RoutedEventArgs e)
{
    //Set the API Endpoint to Graph 'me' endpoint
    string graphAPIEndpoint = "https://graph.microsoft.com/v1.0/me";

    if (authResult != null)
    {
        AppendText(await GetHttpContentWithToken(graphAPIEndpoint, authResult.AccessToken));
    }
    else
    {
        AppendText("You need to sign-in first.");
    }
}

/// <summary>
/// Perform an HTTP GET request to a URL using an HTTP Authorization header
/// </summary>
/// <param name="url">The URL</param>
/// <param name="token">The token</param>
/// <returns>String containing the results of the GET operation</returns>
public async Task<string> GetHttpContentWithToken(string url, string token)
{
    HttpResponseMessage response;
    try
    {
        var request = new HttpRequestMessage(HttpMethod.Get, url);
        // Add the token in Authorization header
        request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", token);
        response = await _httpClient.SendAsync(request);
        var content = await response.Content.ReadAsStringAsync();
        return content;
    }
    catch (Exception ex)
    {
        return ex.ToString();
    }
}
</filebox>

<filebox fn='TokenCacheHelper.cs' collapsed>
static class TokenCacheHelper
{
    public static TokenCache GetUserCache()
    {
        if (usertokenCache == null)
        {
            usertokenCache = new TokenCache();
            usertokenCache.SetBeforeAccess(BeforeAccessNotification);
            usertokenCache.SetAfterAccess(AfterAccessNotification);
        }
        return usertokenCache;
    }

    static TokenCache usertokenCache;

    public static string CacheFilePath = System.Reflection.Assembly.GetExecutingAssembly().Location + "msalcache.txt";

    private static readonly object FileLock = new object();

    public static void BeforeAccessNotification(TokenCacheNotificationArgs args)
    {
        lock (FileLock)
        {
            args.TokenCache.Deserialize(File.Exists(CacheFilePath)
                ? File.ReadAllBytes(CacheFilePath)
                : null);
        }
    }

    public static void AfterAccessNotification(TokenCacheNotificationArgs args)
    {
        // if the access operation resulted in a cache update
        if (args.TokenCache.HasStateChanged)
        {
            lock (FileLock)
            {
                // reflect changes in the persistent store
                File.WriteAllBytes(CacheFilePath, args.TokenCache.Serialize());
                // once the write operation takes place restore the HasStateChanged bit to false
                args.TokenCache.HasStateChanged = false;
            }
        }
    }
}
</filebox>

= Erreurs =
== Application is not supported for this API version. ==
* Inscrire l'application comme {{boxx|converged app}} sur [https://apps.dev.microsoft.com apps.dev.microsoft.com]
* Configurer l'app (redirect url)
* Utiliser le client id de la {{boxx|converged app}}