有没有办法通过Oauth连接botframework? [英] Is there a way how to connect botframework via Oauth?

问题描述

可以使用OAuth和登录表单来授权某些MS应用程序.如果用户登录并允许应用程序想要的权限，那么作为开发人员，您可以通过API读取(和写入)一些数据.

It is possible to authorize some MS apps using OAuth and login form. If the user logins and allows the permissions the app wants then as a developer you can read (and write) some data via API.

https://botframework.com 是否可以?我不希望我的客户在我的管理中必须写下client_id和client_secret.我只希望他们通过登录授予我许可，然后让我下载此数据.

Is it possible with https://botframework.com? I don't want my clients to have to write down the client_id and client_secret in my administration. I just want them to give me permission via logging in and let me download this data.

我已阅读

I've read MS docs about OAuth and have seen that the possible scopes doesn't include the bot platform.

为了证明我的意思，这里是

To demonstrate what I mean here is a demo application from the docs.

推荐答案

我建议您检查 AuthBot .

AuthBot是用于.NET库的Azure Active Directory身份验证 通过Microsoft Bot Framework构建的机器人.

AuthBot is a .Net library for Azure Active Directory authentication on bots built via Microsoft Bot Framework.

简而言之，当使用AuthBot时，您的用户将收到一个链接，该链接将打开并执行OAuth流程.用户不必在机器人中写入凭据(这可能是安全问题)，而将在MS登录页面中完成.然后将调用一个回调(库已提供)，并恢复与用户的对话.

In short, when using AuthBot, your users will receive a link that they will open and perform the OAuth flow. The users won't have to write the credentials in the bot (which could be a security concern) and instead will be done in the MS login page. Then a callback (already provided by the library) will be called and the conversation with the user will be resumed.

您还可以检查 AzureBot 作为使用AuthBot且仅检索信息的Bot的示例.如果您已登录，则可用.

You can also check AzureBot as an example of a Bot that uses AuthBot and that retrieve information only available if you are logged.

这篇关于有没有办法通过Oauth连接botframework?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！