WPF Azure AD App registration Login + API request with Sharepoint Online problem

Question

question

DamienBowden-3028 asked · Nov 08, 2019 at 12:58 AM

WPF Azure AD App registration Login + API request with Sharepoint Online problem

I am trying to use an Azure AD App Registration with a WPF application to upload and download files using Sharepoint Online.

I used https://docs.microsoft.com/en-us/azure/active-directory/develop/tutorial-v2-windows-desktop to authenticate.

I have set up the login, and this works without problem. I get the tokens back. (Microsoft.Identity.Client 4.6)

I added the sharepoint graph API delegated "Sites.FullControl.All"

I tried using the nuget packages SharePointPnPCoreOnline and Microsoft.SharePointOnline.CSOM with the access token from the Azure AD login.

The App registration is created in the same tenant as the sharepoint.

No matter what I try, I cannot get this to work. (401 returned)

I want to CRUD files in a sharepoint List.

Have you any ideas, how I could solve this, examples? Or is there any docs for this?

Regards Damien

azure-active-directory service-fabric-standalone

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2019-11-08T01:11:17.793Z

sfagan answered · Nov 08, 2019 at 01:11 AM

Try SharePoint App Only. From my understanding, SP PnP and CSOM don't use the Graph API, so the Azure App Registration will not work.

https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/security-apponly-azureacs

· Share

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 2 · 2019-11-08T07:29:34.093Z

DamienBowden-3028 answered · Nov 08, 2019 at 07:29 AM

sfagan this doesn't work because the redirect URL is urn:ietf:wg:oauth:2.0:oob, which is not allowed

· Share

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 3 · 2019-11-08T11:56:50.53Z

sfagan answered · Nov 08, 2019 at 11:56 AM

URL Redirect setting in SharePoint or your app? In SharePoint I have normally used http://localhost without issue.

· Share

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 4 · 2019-11-09T20:59:58.987Z

DamienBowden-3028 answered · Nov 09, 2019 at 08:59 PM

Hi Sfagen thanks for your answer. I solved this using Graph API

https://damienbod.com/2019/11/09/wpf-azure-ad-signin-with-sharepoint-online-api-call-using-graph-api/

· Share

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 5 · 2019-12-10T11:46:28.1Z

NoahZemp answered · Dec 10, 2019 at 11:46 AM

Hi Damien

In my opinion using Graph API was a good idea, but I think problem is the Permission you gave your AAD App, because Sites are only the different Sites you have on Sharepoint, they contain other things like Lists and Drives(the place where files are saved). But they're not the actual Files you want to Access.

So if you want to Access your Files i'd recommend using the permission/scope Files.ReadWrite.All.

Regards Noah

· Share

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question