Please provide example implementation for "getAuthTokenCallback" about azuremapscodesamples

Thank you @stack111

Please see #19 as well.

[rbrundritt]

I have asked one of our developers to look into this question. We will report back shortly. Also note that the forums or the Azure support team is a much better place to ask these types of questions.

[walsehgal]

@sujayvsarma, the called function will configure the OAuth credentials to acquire an access token. You can visit Azure Active Directory Authentication libraries to take a look at the list of supported authentication libraries. Also the documentation on how to manage authentication in Azure Maps will help you understand on how to set up Azure AD app registration. Quick question, what language do you want to implement the function in?

@walsehgal -

I have already looked at the documentation you pointed to. They were either confusing or inadequate. I had raised a bug on them which they seem intent on closing instead of addressing.

Which is why I raised this issue hoping that developers will help me with the problem.

Language would be C#.

[rbrundritt]

Walsehgal is the doc writer for Azure maps. Get Outlook for Android<https://aka.ms/ghei36>

…

________________________________ From: Sujay Sarma <[email protected]> Sent: Tuesday, September 3, 2019 7:56:42 PM To: Azure-Samples/AzureMapsCodeSamples <[email protected]> Cc: Ricky Brundritt <[email protected]>; Comment <[email protected]> Subject: Re: [Azure-Samples/AzureMapsCodeSamples] Please provide example implementation for "getAuthTokenCallback" (#19) @walsehgal<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fwalsehgal&data=02%7C01%7C%7C29e2eaf79bad4c99a57c08d730e3848f%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637031626041085160&sdata=%2FXO4IhmAqIXKVS4m2uLjorNliWA4xglGxcnpHa5Y1%2Fw%3D&reserved=0> - I have already looked at the documentation you pointed to. They were either confusing or inadequate. I had raised a bug on them which they seem intent on closing instead of addressing. Which is why I raised this issue hoping that developers will help me with the problem. Language would be C#. — You are receiving this because you commented. Reply to this email directly, view it on GitHub<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FAzure-Samples%2FAzureMapsCodeSamples%2Fissues%2F19%3Femail_source%3Dnotifications%26email_token%3DABRJCRFX2EKB4HADRWVEVYLQH4PWVA5CNFSM4ITET6F2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD52FN7I%23issuecomment-527718141&data=02%7C01%7C%7C29e2eaf79bad4c99a57c08d730e3848f%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637031626041095171&sdata=B43Q5vocOhpog7qe8F7R1OVj%2BRriNga7iTaO%2FeASLIg%3D&reserved=0>, or mute the thread<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FABRJCRE2VOD67GIYB6UXMJ3QH4PWVANCNFSM4ITET6FQ&data=02%7C01%7C%7C29e2eaf79bad4c99a57c08d730e3848f%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637031626041105175&sdata=cwECUf0nOyCeBBneDAi%2BbHaUupPpWlA7Ek01FzMWi8w%3D&reserved=0>.

OMG. Then this request is a waste of time already?

[rbrundritt]

You can also reach out to the Azure support team as well: https://azure.microsoft.com/support/options/ if you want more in-depth support.

[walsehgal]

@sujayvsarma, below is a sample async function deployed as an azure function, it acquires the access token. Hope this helps.

public static async Task<IActionResult> Run(HttpRequest req, ILogger log)
{
    log.LogInformation("C# HTTP trigger function processed a request.");
  
    // Replace the tenant name 
    var authenticationContext = new AuthenticationContext("https://login.microsoftonline.com/<tenant_name>", false);
    
    // Config for OAuth client credentials 
    ClientCredential clientCred = new ClientCredential("<Replace with client ID>", "<Replace with client secret>");
    AuthenticationResult authenticationResult = await authenticationContext.AcquireTokenAsync("https://atlas.microsoft.com/ ", clientCred);
    string token = authenticationResult.AccessToken;
    return (ActionResult)new OkObjectResult(token);        
}

Instead of getting everyone in the world to implement this function, could you just open out the one Microsoft has already implemented - the one that is called in all your examples ? That would be way simpler.

[walsehgal]

This is the same function we are calling in our examples.

I am satisfied with the answer Ricky provided per this reply. Specifically:

A critical part of the service that you create is including your secret token. We can't expose our service and make it reusable as there would not be a secure way to get your secret into it. Also, a lot of companies add a lot of custom logic to their service and often run the service in the same domain as their application.

With that, as well as your code sample, I am happy to close out this issue.

[walsehgal]

Glad to hear that.

@walsehgal - One more question --

How do I correctly configure things between:

• Azure Maps Application (from Create Resource > Azure Maps)
• Azure App Service (that hosts the Maps stuff)
• Azure AD

Basically, how do I correctly register these with each other and in my Azure AD so that I can get a valid token? I tried to set it up from what I thought was logical, I ended up getting a token as well (from the code sample), BUT, Atlas Service API refused to honour the token (HTTP 403). So, I've done something wrong somewhere. But the terminology is far too confusing to attempt to resolve it.

Please help.

[walsehgal]

@sujayvsarma, you are assigning the role to a different service principal than the one you have the token for. Please make sure you get the token for the same service principle and then add it to RBAC.

@walsehgal - Basically here is what I went through:

First, I had only the Azure Maps Application (freshly created). Then from your sample code, I realized I need an App Secret. So I went to Azure AD and saw that (i) it was not registered there as an enterprise app and there was no way to do it.

So, I created a new App Registration (Azure AD > App Registrations > New), set the URLs to my local development URLs (localhost stuff). I gave it user_impersonate delegated permissions to Azure Maps API (from API Permissions). Then, I generated a secret for this application.

I used the Client ID and Secret from the App registration I had created to get the token using your sample code. It is for this token that I keep getting the HTTP 403 messages in the console logs. I can see that the call to the code is normal and seems to work fine -- My application is an ASP.NET Core 3 MVC application and I have implemented it as an Action in one of the Controllers instead of as a separate Azure function.

PS: My interest in getting this flow working is currently academic. Azure Maps API does not return accurate or usable information for India and for the foreseeable future is not a viable solution for my needs.

[stack111]

Hi Sujay, point taken we need to improve our content and simpify the experience :). We definitely appreciate the feedback. Everything you described above appears accurate. However to grant access; what's missing in your steps is to add a role assignment for the application.

You have created role assignments for other service principals but the token being sent doesn't represent any of the service principals.

Alternativily we support groups in Azure AD directory. If it's easier to add your service principal to the group you can do that in the Azure AD directory. Finally, then adding the group as a role assignment.

WRT: India map data, if you want to be more specific we have a tool which can capture the problems and get them fixed.