MS Graph API：订阅Azure Event Hub的组上的通知

Question

基本上，我试图订阅有关组更改的通知，以便在第三方系统中调整授权，请在下面找到代码。它使用Java的Graph SDK。我添加了我遵循的文档以供参考，请参见更改通知交付和在Microsoft文档中发布订阅。

不幸的是我得到了 无效的事件中心通知URL。我尝试了域名和房客ID，没有运气。这并不令我感到惊讶，因为NotificationUrl似乎真的很奇怪。有人可以在这里分享一些灯光吗？

       // From https://learn.microsoft.com/de-de/graph/change-notifications-delivery:

        // The main difference during subscription creation will be the notificationUrl. You must set it to
        //  EventHub:https://<azurekeyvaultname>.vault.azure.net/secrets/<secretname>?tenantId=<domainname>, with the following values:

        //   azurekeyvaultname - The name you gave to the key vault when you created it. Can be found in the DNS name.
        //   secretname - The name you gave to the secret when you created it. Can be found on the Azure Key Vault Secrets page.
        //   domainname - The name of your tenant; for example, consto.onmicrosoft.com or contoso.com. Because this domain will be used to access the Azure Key Vault, it is important that it matches the domain used by the Azure subscription that holds the Azure Key Vault. To get this information, you can go to the overview page of the Azure Key Vault you created and click the subscription. The domain name is displayed under the Directory field.

        @GetMapping("/subscribe")
        public void subscribeTochangeNotifications() {
                // following https://learn.microsoft.com/en-us/graph/api/subscription-post-subscriptions?view=graph-rest-1.0&tabs=http#request-example

                Subscription subscription = new Subscription();
                subscription.changeType = "created,updated";
                subscription.notificationUrl = "EventHub:https://xxxxxxxxx.vault.azure.net/secrets/event-hub-client-secret?tenantId=xxxxxxxxx-xxxx-xxxx-xxxxxxxxx";
                subscription.expirationDateTime = OffsetDateTime.parse("2022-07-05T18:23:45.9356913Z");
                subscription.resource = "/groups";
                subscription.clientState = "SecretClientState";

                azureClient.subscriptions().buildRequest().post(subscription);
        }

详细的错误消息是：

nested exception is com.microsoft.graph.http.GraphServiceException: Error code: InvalidRequest
Error message: Invalid event hub notification url='EventHub:https://xxxxxxxxxxxxxxxxx.vault.azure.net/secrets/event-hub-client-secret?tenantId=yyyyyyy-yyy-yyyy-yyyyyyyyyy'.

POST https://graph.microsoft.com/v1.0/subscriptions
SdkVersion : graph-java/v5.30.0
SdkVersion : graph-java/v5.30.0
[...]

400 : Bad Request
[...]

Answer 1

我们遇到了同一问题（使用Pulumi设置）。 缺少。

";EntityPath=graphevents" 

我们在钥匙库秘密中的连接字符串在最后

Answer 2

@wilberforce，我遇到了同样的问题，并发现我错过了EventHub名称空间中的事件中心创建，该名称空间导致连接字符串无效。创建EventHub名称空间后，您还需要在“ Event Hubs”选项卡上创建EventHub，从创建的事件中心页面中创建“共享访问策略”下的新策略，然后从那里复制连接字符串。确保您的活动中心连接字符串如下

Endpoint=sb://<NamespaceName>.servicebus.windows.net/;SharedAccessKeyName=<KeyName>;SharedAccessKey=<KeyValue>;EntityPath=<EventHubName>