AcquireToken for Graph API first, best practice

Author: dstrockis

TodoListWebApp/App_Start/Startup.Auth.cs

@@ -18,6 +18,7 @@ public partial class Startup
         public static string AppKey = String.Empty;
         public static string TodoListResourceId = String.Empty;
         public static string TodoListBaseAddress = String.Empty;
+        public static string GraphResourceId = String.Empty;
 
         public void ConfigureAuth(IApplicationBuilder app)
         {
@@ -27,6 +28,7 @@ public void ConfigureAuth(IApplicationBuilder app)
             AppKey = Configuration.Get("AzureAd:AppKey");
             TodoListResourceId = Configuration.Get("AzureAd:TodoListResourceId");
             TodoListBaseAddress = Configuration.Get("AzureAd:TodoListBaseAddress");
+            GraphResourceId = Configuration.Get("AzureAd:GraphResourceId");
 
             // Configure the Session Middleware, Used for Storing Tokens
             app.UseSession();
@@ -47,13 +49,12 @@ public void ConfigureAuth(IApplicationBuilder app)
 
         public async Task OnAuthorizationCodeReceived(AuthorizationCodeReceivedNotification notification)
         {
-            // Acquire a Token for the TodoList Web API, and Cache it For Later Use
+            // Acquire a Token for the Graph API and cache it.  In the TodoListController, we'll use the cache to acquire a token to the Todo List API
             string userObjectId = notification.AuthenticationTicket.Principal.FindFirst("http://schemas.microsoft.com/identity/claims/objectidentifier").Value;
             ClientCredential clientCred = new ClientCredential(ClientId, AppKey);
             AuthenticationContext authContext = new AuthenticationContext(Authority, new NaiveSessionCache(userObjectId, notification.HttpContext.Session));
             AuthenticationResult authResult = await authContext.AcquireTokenByAuthorizationCodeAsync(
-                notification.Code, new Uri(notification.RedirectUri), clientCred, Startup.TodoListResourceId);
-
+                notification.Code, new Uri(notification.RedirectUri), clientCred, Startup.GraphResourceId);
         }
     }
 }

TodoListWebApp/config.json

@@ -6,6 +6,7 @@
 		"AadInstance": "https://login.windows.net/{0}", // This is the public instance of Azure AD
 		"PostLogoutRedirectUri": "https://localhost:44322/",
 		"TodoListResourceId": "[Enter App ID URI of TodoListService, e.g. https://contoso.onmicrosoft.com/TodoListService]",
-		"TodoListBaseAddress":  "https://localhost:44321"
+		"TodoListBaseAddress": "https://localhost:44321",
+		"GraphResourceId":  "https://graph.windows.net"
 	}
 }