com.azure.spring.cloud.autoconfigure.aad.graph

Class AzureADGraphClient

java.lang.Object

com.azure.spring.cloud.autoconfigure.aad.graph.AzureADGraphClient

public class AzureADGraphClient
extends Object

Microsoft Graph client encapsulation.

Constructor Summary

Constructors

Constructor and Description
AzureADGraphClient(String clientId, String clientSecret, AADAuthenticationProperties aadAuthenticationProperties, AADAuthorizationServerEndpoints endpoints)

Method Summary

Modifier and Type	Method and Description
com.microsoft.aad.msal4j.IAuthenticationResult	acquireTokenForGraphApi(String idToken, String tenantId) Acquire access token for calling Graph API.
Set<String>	getGroups(String graphApiToken)
Set<org.springframework.security.core.authority.SimpleGrantedAuthority>	toGrantedAuthoritySet(Set<String> groups)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AzureADGraphClient

public AzureADGraphClient(String clientId,
                          String clientSecret,
                          AADAuthenticationProperties aadAuthenticationProperties,
                          AADAuthorizationServerEndpoints endpoints)

Method Detail

getGroups

public Set<String> getGroups(String graphApiToken)
                      throws IOException

Parameters:

graphApiToken - token used to access graph api.

Returns:

groups in graph api.

Throws:

IOException - throw exception if get groups failed by IOException.

toGrantedAuthoritySet

public Set<org.springframework.security.core.authority.SimpleGrantedAuthority> toGrantedAuthoritySet(Set<String> groups)

acquireTokenForGraphApi

public com.microsoft.aad.msal4j.IAuthenticationResult acquireTokenForGraphApi(String idToken,
                                                                              String tenantId)
                                                                       throws ServiceUnavailableException

Acquire access token for calling Graph API.

Parameters:

idToken - The token used to perform an OBO request.

tenantId - The tenant id.

Returns:

The access token for Graph service.

Throws:

ServiceUnavailableException - If fail to acquire the token.

com.microsoft.aad.msal4j.MsalServiceException - If MsalServiceException has occurred.