如何获得UCWA和Skype Web SDK的授权？ [英] How to get authorization to UCWA and Skype Web SDK?
问题描述
我有一个Skype for Business帐户，请致电art@shockw4ves.onmicrosoft.com，我正在尝试获得授权。
I have a Skype for Business account call art@shockw4ves.onmicrosoft.com and I'm trying to get authorization.
- 我第一次要求lyncdiscover服务
GET https://lyncdiscover.shockw4ves.onmicrosoft.com/
答案：
{
"_links": {
"self": {
"href": "https://webdir1e.online.lync.com/Autodiscover/AutodiscoverService.svc/root?originalDomain=shockw4ves.onmicrosoft.com"
},
"user": {
"href": "https://webdir1e.online.lync.com/Autodiscover/AutodiscoverService.svc/root/oauth/user?originalDomain=shockw4ves.onmicrosoft.com"
},
"xframe": {
"href": "https://webdir1e.online.lync.com/Autodiscover/XFrame/XFrame.html"
}
}
}
- 然后我带一个
用户链接并做下一个请求
- Then i take a
userlink and do next request
GET https://webdir1e.online.lync.com/Autodiscover/AutodiscoverService.svc/root/oauth/user?originalDomain=shockw4ves.onmicrosoft.com
答案：
401未经授权
Answer: 401 Unauthorized
Cache-Control → no-cache
Content-Length → 1293
Content-Type → text/html
Date → Wed, 30 Sep 2015 11:16:37 GMT
WWW-Authenticate →
Bearer trusted_issuers="00000001-0000-0000-c000-000000000000@*",
client_id="00000004-0000-0ff1-ce00-000000000000",
authorization_uri="https://login.windows.net/common/oauth2/authorize",
MsRtcOAuth
href="https://webdir1e.online.lync.com/WebTicket/oauthtoken",
grant_type="urn:microsoft.rtc:passive,urn:microsoft.rtc:anonmeeting"
X-Content-Type-Options → nosniff
X-MS-Correlation-Id → 2147499790
X-MS-Server-Fqdn → AMS1E01EDG08.infra.lync.com
client-request-id → ea4f5098-732f-4feb-ae34-cf6ff7fc1a73
- 此响应包含我的凭据数据。我接受授权uri并做我的下一个请求
POST https://login.windows.net/common/oauth2/authorize
body of x-www-form-urlencoded:
grant_type=password
username=art@shockw4ves.onmicrosoft.com
password=xxxxxxxxxx
client_id=00000004-0000-0ff1-ce00-000000000000
Answer:
<html>
<head>
<title>Continue</title>
</head>
<body>
<form method="POST" name="hiddenform" action="https://login.microsoftonline.com/common/oauth2/authorize">
<input type="hidden" name="grant_type" value="password" />
<input type="hidden" name="username" value="art@shockw4ves.onmicrosoft.com" />
<input type="hidden" name="password" value="xxxxxxxxx" />
<input type="hidden" name="client_id" value="00000004-0000-0ff1-ce00-000000000000" />
<noscript>
<p>Script is disabled. Click Submit to continue</p>
<input type="submit" value="Submit" />
</noscript>
</form>
<script language="javascript">window.setTimeout('document.forms[0].submit()', 0);</script>
</body>
</html>
- 复制这个html表单并在浏览器中运行。它重定向到 https://login.microsoftonline.com/common/oauth2/authorize 和打开包含错误文本的页面：
- Copy this html form and run in browser. Its redirect to https://login.microsoftonline.com/common/oauth2/authorize and open page with error text:
Sign In
Sorry, but we’re having trouble signing you in.
We received a bad request.
Additional technical information:
Correlation ID: 0669eee8-0dc5-4aa1-a94d-41e5bbc2f25d
Timestamp: 2015-09-30 14:06:30Z
AADSTS50011: No reply address is registered for the application.
我做错了什么？我也测试：
What i do wrong? Also i test with:
grant_type=password
grant_type="urn:microsoft.rtc:passive,urn:microsoft.rtc:anonmeeting"
grant_type="urn:microsoft.rtc:windows,urn:microsoft.rtc:anonmeeting,password"
什么是错误没有为申请注册回复地址？
What is error No reply address is registered for the application ?
推荐答案
有几个问题。第二步的401响应包含WWW-Authenticate标头，其中 grant_type =urn：microsoft.rtc：passive，urn：microsoft.rtc：anonmeeting，这意味着只能通过被动或匿名方式进行身份验证。在步骤3中，请求尝试使用不受支持的授权类型密码。
There are a few problems. The second step's 401 response contains a WWW-Authenticate header with grant_type="urn:microsoft.rtc:passive,urn:microsoft.rtc:anonmeeting" which means authentication is only allowed via passive or anonmeeting. In step 3 the request is trying to use an unsupported grant type, password.
有问题的帐户看起来/感觉它与Office365 / Lync Online相关联，这意味着目前对UCWA没有任何支持。即使支持这一点，您也需要了解如何使用被动身份验证进行身份验证， UCWA中的身份验证，目前尚未有详细记录。
The account in question looks/feels like it is associated with Office365/Lync Online which means there isn't any current support for UCWA. Even if this was supported you would need to be looking at how to authenticate using passive authentication, Authentication in UCWA, which is not well documented right now.
这篇关于如何获得UCWA和Skype Web SDK的授权？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
