为什么我使用vuejs 3从Azure B2C获得空访问令牌

Question

我正在使用msal.js（@azure/msal-browser“：”^2.23.0“）的最后一个版本，我可以成功地authnenticat，但是访问令牌为空，我不知道为什么。 我希望在这里发布代码，希望有人可以帮助吗？

export const useAuthUserStore = defineStore("auth_user", {
state: () => ({
msalConfig: {
  auth: {
    clientId: "xxx",
    authority: xxxxxxxx,
    knownAuthorities: [xxxxxxx.onmicrosoft.com],
    redirectUri: http://localhost:8080/
  },
  cache: {
    cacheLocation: 'localStorage',
  },
},
accessToken: "",

isAuthenticated:false,
}),

获取访问方法：

   async getAccessToken(){
  let request = {
    scopes: [https://graph.microsoft.com/offline_access,https://graph.microsoft.com/openid],
   // scopes: ['openid',  'offline_access' ],
   extraScopesToConsent:['<tenant>.onmicrosoft.com/api/read']
  };
  const msalInstance = new PublicClientApplication(
   this.authStore.$state.msalConfig
  );
  try {
    let tokenResponse = await msalInstance.acquireTokenSilent({
      account: this.account ,
        scopes: [https://graph.microsoft.com/offline_access,https://graph.microsoft.com/openid]

    });
     console.log('tokenResponse :',tokenResponse)
    return tokenResponse
  } catch (error) {
      console.error( 'Silent token acquisition failed. Using interactive mode',error );
      let tokenResponse = await msalInstance.acquireTokenPopup(request);
      console.log(`Access token acquired via interactive auth ${tokenResponse.accessToken}`)
  }

},

handleResponse(response) {

  console.log('handleResponse.......')

  let accountId = "";

  const loginRequest = {

   scopes: [https://graph.microsoft.com/offline_access,https://graph.microsoft.com/openid],
     }

  console.log('handleResponse.......',response)

    if (response !== null) {
        accountId = response.account.homeAccountId;
        console.log(accountId)
        // Display signed-in user content, call API, etc.

    } else {

        // In case multiple accounts exist, you can select

        const currentAccounts = this.$msalInstance.getAllAccounts();
        if (currentAccounts.length === 0) {
            // no accounts signed-in, attempt to sign a user in
            this.$msalInstance.loginRedirect(loginRequest);
        } else if (currentAccounts.length > 1) {
         // console.log('handleResponse.......96')

            // Add choose account code here

        } else if (currentAccounts.length === 1) {

         // console.log('handleResponse.......23')

            accountId = currentAccounts[0].homeAccountId;

           // console.log('handleResponse 111.......',accountId)

        }

    }

}

结果： 在此处输入图像描述

您能帮忙吗？我必须添加任何丢失的代码吗？

Answer 1

使用MSAL提供的AcquireToken方法，您可以接收应用程序需要调用的API的访问令牌。

源代码： - github样品

有关更多信息，请参阅以下链接： -

• 因此，线程|无法通过需求EnecteTokenSilent @azure/msal-browser 获得访问权限。