使用个人帐户时，给定的令牌是EWS OAuth身份验证中的无效错误

Question

我必须从任何帐户中获取Exchange Server的联系人，因此我们从下面的链接中使用了代码。

https://learn.microsoft.com/en-us/exchange/client-developer/exchange-web-services/how-to-to-to-authenticate-an-ews-an-ews-application-by-usish-using-oauth

但是它不适用于个人帐户，这对我们的组织帐户工作正常。因此，我已经使用了Aadauthorityaudience属性，而不是tenantid，并将范围从ews.accessasuser.ther更改为其他。现在，身份验证获得了成功，但是在Exchangeservice中使用令牌时，获得“给定令牌无效”错误。

var pcaOptions = new PublicClientApplicationOptions {
    ClientId = "77xxxxxxxxxxx92324",
    //TenantId = "7887xxxxxxxxxxxxx14",
    RedirectUri = "https://login.live.com/oauth20_desktop.srf",
    AadAuthorityAudience = AadAuthorityAudience.AzureAdAndPersonalMicrosoftAccount};

var pca = PublicClientApplicationBuilder.CreateWithApplicationOptions(pcaOptions).Build();

//var ewsScopes = new string[] { "https://outlook.office365.com/EWS.AccessAsUser.All" };
var ewsScopes = new string[] { "User.Read", "Contacts.ReadWrite.Shared" };

var authResult = await pca.AcquireTokenInteractive(ewsScopes).ExecuteAsync();

var ewsClient = new ExchangeService();
ewsClient.Url = new Uri("https://outlook.office365.com/EWS/Exchange.asmx");
//ewsClient.ImpersonatedUserId = new ImpersonatedUserId(ConnectingIdType.SmtpAddress, "[email protected]");
ewsClient.Credentials = new OAuthCredentials(authResult.AccessToken);

// Make an EWS call
var folders = ewsClient.FindFolders(WellKnownFolderName.MsgFolderRoot, new FolderView(10));

这里做错了什么？

Answer 1

https://outlook.office365.com/ews.accessasuser.all 使用范围。由于不受EWS的支持，因此该范围对个人帐户无效。