Microsoft Graph API访问令牌验证失败（java）

Question

我想设置一个原生的Java应用程序，它将在使用ADAL4j进行身份验证后，利用MS Graph的API访问用户OneDrive。我正在使用this库来获取我的访问令牌。到目前为止，我有这样的代码：

import java.io.BufferedReader; 
import java.io.InputStreamReader; 
import java.util.concurrent.ExecutorService; 
import java.util.concurrent.Executors; 
import java.util.concurrent.Future; 

import javax.naming.ServiceUnavailableException; 

import com.microsoft.aad.adal4j.AuthenticationContext; 
import com.microsoft.aad.adal4j.AuthenticationResult; 

public class Get { 

    private final static String AUTHORITY = "https://login.windows.net/common/oauth2/v2.0/authorize"; 
    private final static String CLIENT_ID = "29275...011a"; 
    private final static String RESOURCE = "https://graph.windows.net"; 


    public static void main(String[] args) throws Exception { 

     try (BufferedReader br = new BufferedReader(new InputStreamReader(
      System.in))) { 
      System.out.print("Enter username: "); 
      String username = br.readLine(); 
      System.out.print("Enter password: "); 
      String password = br.readLine(); 

      AuthenticationResult result = getAccessTokenFromUserCredentials(
       username, password); 
      System.out.println("Access Token - " + result.getAccessToken()); 
      System.out.println("Refresh Token - " + result.getRefreshToken()); 
      System.out.println("ID Token - " + result.getIdToken()); 
      System.out.println("Expires in - " + result.getExpiresAfter()); 
     } 
    } 

    private static AuthenticationResult getAccessTokenFromUserCredentials(
     String username, String password) throws Exception { 
     AuthenticationContext context = null; 
     AuthenticationResult result = null; 
     ExecutorService service = null; 
     try { 
      service = Executors.newFixedThreadPool(1); 
      context = new AuthenticationContext(AUTHORITY, false, service); 
      Future<AuthenticationResult> future = context.acquireToken(RESOURCE, CLIENT_ID, username, password, null); 
      result = future.get(); 
     } finally { 
      service.shutdown(); 
     } 

     if (result == null) { 
      throw new ServiceUnavailableException(
       "authentication result was null"); 
     } 
     return result; 
    } 

} 

当我运行它，我进入帐户凭据，然后访问令牌，令牌刷新，ID令牌，并在时间结束都打印出来。然后我使用chromes“Advanced Rest Client”插件来测试auth令牌（下面的截图）。

screenshot

然后我得到的截图下方所示的访问令牌验证错误。我不明白令牌不起作用的原因。我在Azure AD中注册的应用上设置了权限，并且该用户已授予该应用的权限。我能想到的唯一的事情是，可能范围没有指定，但我不确定这是问题。如果是我如何指定它们？

Answer 1

我发现了这个问题。

资源URI错误。 Azure AD Graph API是https://graph.windows.net。

微软图形API资源URI是https://graph.microsoft.com/