Azure AD B2C - 角色管理[重复]

使用 Azure AD B2C 实现角色管理

csharp
using Microsoft.Graph;
using Microsoft.Identity.Client;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
public class AzureAdB2CService
{
    private static readonly string TenantId = "your-tenant-id";
    private static readonly string ClientId = "your-client-id";
    private static readonly string ClientSecret = "your-client-secret";
    public async Task CreateRoleAsync(string roleName)
    {
        IConfidentialClientApplication confidentialClientApplication = ConfidentialClientApplicationBuilder
            .Create(ClientId)
            .WithClientSecret(ClientSecret)
            .WithAuthority($"https://login.microsoftonline.com/{TenantId}")
            .Build();
        ClientCredentialProvider authProvider = new ClientCredentialProvider(confidentialClientApplication);
        GraphServiceClient graphServiceClient = new GraphServiceClient(authProvider);
        var roleDefinition = new RoleDefinition
        {
            DisplayName = roleName,
            Description = "Role for " + roleName,
            RolePermissions = new List()
            {
                new RolePermission
                {
                    ResourceActions = new List()
                    {
                        "read",
                        "write"
                    },
                    ResourceScopes = new List()
                    {
                        "User",
                        "Group"
                    }
                }
            }
        };
        await graphServiceClient.RoleDefinitions.Request().AddAsync(roleDefinition);
        return true;
    }
}

csharp
using Microsoft.Graph;
using Microsoft.Identity.Client;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
public class AzureAdB2CService
{
    private static readonly string TenantId = "your-tenant-id";
    private static readonly string ClientId = "your-client-id";
    private static readonly string ClientSecret = "your-client-secret";
    public async Task AssignRoleToUserAsync(string userId, string roleName)
    {
        IConfidentialClientApplication confidentialClientApplication = ConfidentialClientApplicationBuilder
            .Create(ClientId)
            .WithClientSecret(ClientSecret)
            .WithAuthority($"https://login.microsoftonline.com/{TenantId}")
            .Build();
        ClientCredentialProvider authProvider = new ClientCredentialProvider(confidentialClientApplication);
        GraphServiceClient graphServiceClient = new GraphServiceClient(authProvider);
        var user = await graphServiceClient.Users[userId].Request().GetAsync();
        var role = await graphServiceClient.RoleDefinitions.Request().Filter($"displayName eq '{roleName}'").GetAsync();
        var memberOf = new DirectoryObject[]
        {
            new DirectoryRole
            {
                Id = role.First().Id
            }
        };
        await graphServiceClient.Users[user.Id].MemberOf.Request().AddAsync(memberOf);
        return true;
    }
}

csharp
using Microsoft.Graph;
using Microsoft.Identity.Client;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
public class AzureAdB2CService
{
    private static readonly string TenantId = "your-tenant-id";
    private static readonly string ClientId = "your-client-id";
    private static readonly string ClientSecret = "your-client-secret";
    public async Task CheckUserRoleAsync(string userId, string roleName)
    {
        IConfidentialClientApplication confidentialClientApplication = ConfidentialClientApplicationBuilder
            .Create(ClientId)
            .WithClientSecret(ClientSecret)
            .WithAuthority($"https://login.microsoftonline.com/{TenantId}")
            .Build();
        ClientCredentialProvider authProvider = new ClientCredentialProvider(confidentialClientApplication);
        GraphServiceClient graphServiceClient = new GraphServiceClient(authProvider);
        var user = await graphServiceClient.Users[userId].Request().GetAsync();
        var role = await graphServiceClient.RoleDefinitions.Request().Filter($"displayName eq '{roleName}'").GetAsync();
        var memberOf = await graphServiceClient.Users[user.Id].MemberOf.Request().GetAsync();
        return memberOf.Any(m => m.Id == role.First().Id);
    }
}