在AppSettings.json中使用MicrosoftappPassword的目的是什么？
全部。
根据上面链接中所述的图，我猜bot Connector Service和brot之间的身份验证流如下。
- Bot Connector Service通过MicrosoftAppid和MicrosoftappPassword从Azuread获取访问令牌。
- Bot Connector Service将第1号生成的令牌发送给授权标头的机器人。
- bot验证令牌并确认JWT令牌中的受众字段
在此流中包含MicrosoftAppid，似乎Bot不使用Bot Application的AppSettings.json中定义的MicrosoftappPassword。
是否需要在AppSettings.json中定义MicrosoftappPassword？在AppSettings.json中使用MicrosoftappPassword的目的是什么？
All.
https://learn.microsoft.com/en-us/azure/bot-service/bot-builder-concept-authentication-types
According to the figure described in the link above, I guess that the authentication flow between Bot Connector Service and Bot is as below.
- Bot Connector Service gets an access token from AzureAD with MicrosoftAppID and MicrosoftAppPassword.
- Bot Connector Service sends the token generated in No.1 to Bot with Authorization Header.
- Bot validates the token and confirm that audience field in JWT Token contains MicrosoftAppID
In this flow, It seems that Bot does not use MicrosoftAppPassword defined in Bot Application's appsettings.json.
Is it required to define MicrosoftAppPassword in appsettings.json? What is the purpose of using MicrosoftAppPassword in appsettings.json?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
对于单个和多租户机器人，该机器人必须同时具有appid和appPassword，才能为机器人连接器服务进行身份验证。没有AppPassword，Bot 就无法与Azure通信。
唯一的例外是托管身份，这是一种身份验证机制，顾名思义。使用其中一种时，您不提供AppPassword。
For single and multi tenant bots, the bot must have both the AppId and the AppPassword to be able to authenticate itself to the Bot Connector Service. Without the AppPassword, the bot cannot communicate with Azure.
The only exception is a Managed Identity, which is an authentication mechanism that is managed by Azure across multiple resources, as the name implies. When using one of these, you do not supply an AppPassword.