AzureのB2CのOauth：

Question

私はサインインしてへのリダイレクト後のOauthトークンaquisition部分を続行することができませんでしだhttps://azure.microsoft.com/en-us/documentation/articles/active-directory-b2c-reference-oauth-code/

からチュートリアル以下のよSSL/TLSのセキュリティで保護されたチャネルの信頼関係を確立できませんでしたOAuthCallback

はここ

は、私はそれがここに私の方法だ

public async static Task<AdAcessToken> ExchangeCodeForAccessToken(string userId, string conversationId, string code, string AdOauthCallback) 
    { 
     var uri = new Uri("https://login.microsoftonline.com/baad.onmicrosoft.com/oauth2/v2.0/token?p=b2c_1_sign-in"); 

     var formdata = new FormUrlEncodedContent(new[] 
     { 
      new KeyValuePair<string, string>("grant_type", "authorization_code"), 
      new KeyValuePair<string, string>("client_id", Constants.ADClientId), 
      new KeyValuePair<string, string>("scope", "openid offline_access"), 
      new KeyValuePair<string, string>("code", code), 
      new KeyValuePair<string, string>("redirect_uri", AdOauthCallback) 
     }); 


     var data = new 
     { 
      grant_type = "authorization_code", 
      client_id = Constants.ADClientId, 
      scope = "openid offline_access", 
      code = code, 
      redirect_uri = AdOauthCallback 
     }; 

     return await AdPostRequest<AdAcessToken>(uri,data); 
    } 

呼び出すのWHERE

private static async Task<T> AdPostRequest<T>(Uri uri, Object data) 
    { 
     string json; 

     using (HttpClient client = new HttpClient()) 
     { 
      client.BaseAddress = new Uri("https://login.microsoftonline.com/"); 
      client.DefaultRequestHeaders.Host = "microsoftonline.com"; 
      client.DefaultRequestHeaders.Accept.Add(new System.Net.Http.Headers.MediaTypeWithQualityHeaderValue("application/json")); 

      var returned = await client.PostAsJsonAsync(uri, data).ConfigureAwait(false); //SSL ERROR IM STUCK HERE!!!!    
      json = returned.Content.ReadAsStringAsync().Result; 
     } 

     try 
     { 
      var result = JsonConvert.DeserializeObject<T>(json); 
      return result; 
     } 
     catch (JsonException ex) 
     { 
      throw new ArgumentException("Unable to deserialize the AD response.", ex); 
     } 
    } 

はここ

This XML file does not appear to have any style information associated with it. The document tree is shown below. 
<Error> 
<Message>An error has occurred.</Message> 
<ExceptionMessage>An error occurred while sending the request.</ExceptionMessage> 
<ExceptionType>System.Net.Http.HttpRequestException</ExceptionType> 
<StackTrace> 
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Runtime.CompilerServices.ConfiguredTaskAwaitable`1.ConfiguredTaskAwaiter.GetResult() at VSTF_RD_Bot.AdHelpers.<AdPostRequest>d__7`1.MoveNext() in C:\Users\bob\Development\BotFrameworkSample-master\Bot\VSTF_RD_Bot\AdHelpers.cs:line 130 --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult() at VSTF_RD_Bot.AdHelpers.<ExchangeCodeForAccessToken>d__2.MoveNext() in C:\Users\bob\Development\BotFrameworkSample-master\Bot\VSTF_RD_Bot\AdHelpers.cs:line 73 --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult() at VSTF_RD_Bot.Controllers.OAuthCallbackController.<OAuthCallback>d__0.MoveNext() in C:\Users\bob\Development\BotFrameworkSample-master\Bot\VSTF_RD_Bot\Controllers\OAuthCallbackController.cs:line 34 --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult() at System.Threading.Tasks.TaskHelpersExtensions.<CastToObject>d__3`1.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult() at System.Web.Http.Controllers.ApiControllerActionInvoker.<InvokeActionAsyncCore>d__0.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult() at System.Web.Http.Controllers.ActionFilterResult.<ExecuteAsync>d__2.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult() at System.Web.Http.Dispatcher.HttpControllerDispatcher.<SendAsync>d__1.MoveNext() 
</StackTrace> 
<InnerException> 
<Message>An error has occurred.</Message> 
<ExceptionMessage> 
The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. 
</ExceptionMessage> 
<ExceptionType>System.Net.WebException</ExceptionType> 
<StackTrace> 
at System.Net.HttpWebRequest.EndGetRequestStream(IAsyncResult asyncResult, TransportContext& context) at System.Net.Http.HttpClientHandler.GetRequestStreamCallback(IAsyncResult ar) 
</StackTrace> 
<InnerException> 
<Message>An error has occurred.</Message> 
<ExceptionMessage> 
The remote certificate is invalid according to the validation procedure. 
</ExceptionMessage> 
<ExceptionType> 
System.Security.Authentication.AuthenticationException 
</ExceptionType> 
<StackTrace> 
at System.Net.TlsStream.EndWrite(IAsyncResult asyncResult) at System.Net.PooledStream.EndWrite(IAsyncResult asyncResult) at System.Net.ConnectStream.WriteHeadersCallback(IAsyncResult ar) 
</StackTrace> 
</InnerException> 
</InnerException> 
</Error> 

はお知らせくださいエラー出力です。私はPowershellのステップを行ったこともありますが、動作していないようです。

Step 5: Trust the IIS Express SSL certificate 

Since the web API is SSL protected, the client of the API (the web app) will refuse the SSL connection to the web API unless it trusts the API's SSL certificate. Use the following steps in Windows Powershell to trust the IIS Express SSL certificate. You only need to do this once. If you fail to do this step, calls to the TodoListService will always throw an unhandled exception where the inner exception message is: 

"The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel." 

To configure your computer to trust the IIS Express SSL certificate, begin by opening a Windows Powershell command window as Administrator. 

Query your personal certificate store to find the thumbprint of the certificate for CN=localhost: 

PS C:\windows\system32> dir Cert:\LocalMachine\My 


    Directory: Microsoft.PowerShell.Security\Certificate::LocalMachine\My 

私は続行できません。この問題を解決するにはどうしたらいいですか、ドキュメントに何か更新がないようですが、何か逃しましたか？これに

client.DefaultRequestHeaders.Host = "microsoftonline.com"; 

：

Answer 1

は、これを変更してみてください

client.DefaultRequestHeaders.Host = "login.microsoftonline.com"; 

Answer 2

あなたはクロームでアプリケーションをデバッグしていますか？ 1）任意のIEまたはFirefoxでデバッグ 2）ブラウザにNot Secure警告メッセージが表示されたら、[詳細設定]をクリックします。 3）Advancedで一度、View Certificate を検索します。4）View Certificateを見つけたら、それをディスクに保存します。 5）デバッグをやり直してください。今回はChrome 6）安全でない旨の警告が表示されたら、Chromeの設定に進みます。7）デフォルトを使用して保存した証明書をインポートします。

これは、基本的に自己署名証明書を登録する方法です。システムがそれを信用するように他の方法もありますが、これは私がここで行ったことであり、うまくいきました。 お手伝いをしてください。