D365: Graph API(三)程序调用Graph API

D365: Graph API(三)程序调用Graph API

在D365中，系统通过GraphAPIClient封装了Graph API接口，可以直接通过调用SysUserMSODSImportHelper::getGraphAPIClient().ListUsers().GetEnumerator()来获取AAD的用户列表，但是通过此方式，有一些限制条件，不能获取到所有字段信息，不能自定义筛选和不能指定字段进行查询。

在D365中，创建用户需要手工进行添加或者手工来导入，当如果有客户希望系统可以自动根据一定规则从AAD检索用户信息直接导入到D365来创建用户，如果通过GraphAPIClient来做，由于上面的一些限制条件，导致有些需求我们无法实现，例如有些字段GraphAPIClient是获取不到的，像office location, onPremisesSamAccountName, employeeid等等，还比如，如果需要做一些筛选，某些特定用户不需要导入到D365，GraphAPIClient不能指定筛选条件

出于上面的限制条件，要实现用户创建自动化，我们需要借助于Graph API，通过代码进行直接调用。

实现跟前面讲到的Postman一样，先获取token，在根据token请求API，下面是具体的逻辑实现

//生成token
public static str getGraphToken(str _tenantId,
                                    str _clientId,
                                    str _clientSecret)
    {
        System.Net.HttpWebRequest       request;
        System.Net.HttpWebResponse      response;
        System.Text.ASCIIEncoding       encodingASCII;
        System.Net.WebHeaderCollection  httpHeader;
        VyaAuthorizationToken           authorizationToken = new VyaAuthorizationToken();
        System.IO.Stream                requestStream, receiveStream;
        System.IO.StreamReader          readStream;
        CLRObject   clrObj;
        str         postData;
        str         graphUrl    = strFmt("https://login.microsoftonline.com/%1/oauth2/v2.0/token", _tenantId);
        ;

        new InteropPermission(InteropKind::ClrInterop).assert();
        httpHeader = new System.Net.WebHeaderCollection();
        clrObj  = System.Net.WebRequest::Create(graphUrl);
        request = clrObj;

        request.set_Method("POST");
        request.set_KeepAlive(true);
        request.set_ContentType("application/x-www-form-urlencoded");

        postData  = "client_id=" + _clientId;
        postData += "&scope=https://graph.microsoft.com/.default";
        postData += "&client_secret=" + _clientSecret;
        postData += "&grant_type=client_credentials";

        encodingASCII = new System.Text.ASCIIEncoding();
        var data                = encodingASCII.GetBytes(postData);
        request.ContentLength   = data.Length;
        requestStream = request.GetRequestStream();
        requestStream.Write(data, 0, data.Length);
        requestStream.Close();

        response        = request.GetResponse();
        receiveStream   = response.GetResponseStream();
        readStream      = new System.IO.StreamReader(receiveStream, System.Text.Encoding::get_UTF8());

        str result    = readStream.ReadToEnd();
        authorizationToken  = FormJsonSerializer::deserializeObject(classNum(VyaAuthorizationToken), result);

        response.Close();
        readStream.Close();

        return authorizationToken.access_Token;

    }

//序列化返回token的json
[DataContractAttribute]
class VyaAuthorizationToken
{
    public str  token_Type;
    public str  resource;
    public str  access_Token;
    public real expires_In;
    public real not_Before;
    public real expires_On;

    [DataMemberAttribute('token_type')]
    public str paramToken_type(str _token_type = token_type)
    {
        token_type = _token_type;

        return token_type;
    }

    [DataMemberAttribute('resource')]
    public str paramResource(str _resource = resource)
    {
        resource = _resource;

        return resource;
    }

    [DataMemberAttribute('access_Token')]
    public str paramAccess_Token(str _access_Token = access_Token)
    {
        access_Token = _access_Token;

        return access_Token;
    }

    [DataMemberAttribute('expires_In')]
    public real paramExpires_In(real _expires_In = expires_In)
    {
        expires_In = _expires_In;

        return expires_In;
    }

    [DataMemberAttribute('not_Before')]
    public real paramNot_Before(real _not_Before = not_Before)
    {
        not_Before = _not_Before;

        return not_Before;
    }

    [DataMemberAttribute('expires_On')]
    public real paramExpires_On(real _expires_On = expires_On)
    {
        expires_On = _expires_On;

        return expires_On;
    }

}

//根据请求地址和token，获取到用户信息Json
public static str getUserProperty(str _graphUrl,
                                      str _token)
    {
        System.Net.HttpWebRequest       request;
        System.Net.HttpWebResponse      response;
        System.Exception                ex;
        System.Net.WebHeaderCollection  httpHeader;
        System.IO.Stream                requestStream, responseStream;
        System.IO.StreamReader          streamRead;
        System.IO.StreamWriter          streamWriter;
        CLRObject                       clrObj;
        str                             returnJson;
        container                       dataList;
        Map                             mapData;
        ;
        try
        {
            httpHeader = new System.Net.WebHeaderCollection();
            new InteropPermission(InteropKind::ClrInterop).assert();
            clrObj = System.Net.WebRequest::Create(_graphUrl);
            request = clrObj;

            // adding headers
            httpHeader.Add("ConsistencyLevel", "eventual");
            httpHeader.Add("Authorization", strFmt("Bearer %1", _token));
            request.set_Method("GET");
            request.set_KeepAlive(true);
            request.set_ContentType("application/json");
            request.set_Headers(httpHeader);

            response   = request.GetResponse();
            streamRead = new System.IO.StreamReader(response.GetResponseStream());
            returnJson = streamRead.ReadToEnd();
        }
        catch
        {
            ex = CLRInterop::getLastException().GetBaseException();
            error(ex.get_Message());
        }

        return returnJson;

    }

//返回的用户信息进行json解析,并存储在container中
public container userList()
    {
        Map                 userPropertyJsonMap, userPropertyMap;
        MapEnumerator       userPropertyMapEnum;
        container           userList, userListAll;
        str                 userPropertyJson;
        str                 employeeIdAAD;
        str                 userPrincipalNameAAD;
        str                 nextLinkAAD;
        str                 token;
        SystemParameters    systemParameters = SystemParameters::find();
        UserInfo            userInfo;
        int                 rows = 1;
        ;
        str graphUrl        = systemParameters.VyaGraphURL;
        str tenant_id       = systemParameters.VyaGraphTenantId;
        str clientId          = systemParameters.VyaGraphClientId;
        str clientSecret    = systemParameters.VyaGraphSecret;
        token                 = VyaUserAutoGenerateFromAAD::getGraphToken(tenant_id, clientId, clientSecret);
        userPropertyJson    = VyaUserAutoGenerateFromAAD::getUserProperty(graphUrl, token);
        userPropertyJsonMap = RetailCommonWebAPI::getMapFromJsonString(userPropertyJson);
        
        if (userPropertyJsonMap.exists(#Value))
        {
            userList    = userPropertyJsonMap.lookup(#Value);
            userList    = conDel(userList, 1, 3);
        }
        if (userList)
        {
            userListAll    = conIns(userListAll, 1, userList);
        }
        if (userPropertyJsonMap.exists(#NextLink))
        {
            nextLinkAAD = userPropertyJsonMap.lookup(#NextLink);
            while (nextLinkAAD != "")
            {
                [userList, nextLinkAAD]    = this.getNextUserList(nextLinkAAD, token);
                if (userList)
                {
                    rows++;
                    userListAll    = conIns(userListAll, rows, userList);
                }
            }
        }
        
        return userListAll;
    }

    public container getNextUserList(str _nextLink, str _token)
    {
        System.Net.HttpWebRequest       request;
        System.Net.HttpWebResponse      response;
        str                             nextLink, returnJson;
        container                       userList;
        Map                             userMap;
        CLRObject                       clrObj;
        System.Exception                ex;
        System.Net.WebHeaderCollection  httpHeader;
        System.IO.Stream                requestStream, responseStream;
        System.IO.StreamWriter          streamWriter;
        ;
        try
        {
            httpHeader  = new System.Net.WebHeaderCollection();
            new InteropPermission(InteropKind::ClrInterop).assert();
            clrObj      = System.Net.WebRequest::Create(_nextLink);
            request     = clrObj;
            httpHeader.Add("ConsistencyLevel", "eventual");
            httpHeader.Add("Authorization", strFmt("Bearer %1", _token));
            request.set_Method("GET");
            request.set_KeepAlive(true);
            request.set_ContentType("application/json");
            request.set_Headers(httpHeader);

            response    = request.GetResponse();
            System.IO.StreamReader streamRead = new System.IO.StreamReader(response.GetResponseStream());
            returnJson  = streamRead.ReadToEnd();
            userMap     = RetailCommonWebAPI::getMapFromJsonString(returnJson);
            if (userMap.exists(#Value))
            {
                userList    = userMap.lookup(#Value);
                userList    = conDel(userList, 1, 3);
            }
            if (userMap.exists(#NextLink))
            {
                nextLink = userMap.lookup(#NextLink);
            }
        }
        catch
        {
            //exception
            ex = CLRInterop::getLastException().GetBaseException();
            error(ex.get_Message());
        }
        return [userList, nextLink];
    }