首先，导航到“Azure Active Directory”>“应用程序注册”>“新建注册”，创建应用程序注册后，然后将您的端点添加到其中，如下所示。
x1c 0d1x的数据

• 选择支持的帐户类型，并设置重定向URI（可以使用http://localhost:5000/callback进行本地测试）。
• 完成注册后，请记下应用程序概述中的“应用程序（客户端）ID”和“目录（租户）ID”。

的

在Flask应用程序中实施OAuth流

from flask import Flask, request, redirect, url_for, session, jsonify
from msal import ConfidentialClientApplication
import requests

app = Flask(__name__)
app.secret_key = "your_secret_key"

# Azure AD application details
client_id = "your_client_id"
client_secret = "your_client_secret"
authority = "https://login.microsoftonline.com/your_tenant_id"

# 3rd party API details
api_url = "https://api.example.com/endpoint"

@app.route('/')
def home():
    return "Home Page"

@app.route('/login')
def login():
    auth_url = (
        f"{authority}/oauth2/v2.0/authorize?"
        f"client_id={client_id}"
        "&response_type=code"
        "&redirect_uri=http://localhost:5000/callback"
        "&scope=User.Read"  # Adjust scopes based on your API permissions
    )
    return redirect(auth_url)

@app.route('/callback')
def callback():
    if "code" in request.args:
        code = request.args["code"]
        cca = ConfidentialClientApplication(
            client_id, client_secret, authority,
            post_logout_redirect_uri="http://localhost:5000"
        )
        token_response = cca.acquire_token_by_authorization_code(
            code, scopes=["User.Read"], redirect_uri="http://localhost:5000/callback"
        )
        session["access_token"] = token_response["access_token"]
        return "Authentication successful! You can now make API requests."

    return "Authentication failed."

@app.route('/make_api_request')
def make_api_request():
    access_token = session.get("access_token")
    
    if access_token:
        # Make a sample API request using the obtained access token
        headers = {
            'Authorization': f'Bearer {access_token}',
            'Content-Type': 'application/json'
        }

        try:
            # Replace this with the actual payload and endpoint of the 3rd party API
            api_data = {'key1': 'value1', 'key2': 'value2'}
            response = requests.post(api_url, headers=headers, json=api_data)

            if response.status_code == 200:
                return jsonify(response.json())
            else:
                return f"Error: {response.status_code}\nResponse: {response.text}"

        except Exception as e:
            return f"An error occurred: {str(e)}"
    else:
        return "Access token not found. Please authenticate first."

if __name__ == '__main__':
    app.run(port=5000)

字符串
/make_api_request路由使用会话中存储的访问令牌向第三方API（api_url）发出示例POST请求

• 在浏览器中运行Flask应用程序并访问http://localhost:5000/login以启动OAuth流。-身份验证后，您将被重定向到回调URL，访问令牌将存储在会话中。

的
访问http://localhost:5000/make_api_request，使用获得的访问令牌发出API请求。