Update Microsoft Identity Web to 0.2.2-preview. (#155)

Author: pmaytak

1. Desktop app calls Web API/TodoListService/TodoListService.csproj

@@ -7,6 +7,6 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Identity.Web" Version="0.2.1-preview" />
+    <PackageReference Include="Microsoft.Identity.Web" Version="0.2.2-preview" />
   </ItemGroup>
 </Project>

2. Web API now calls Microsoft Graph/README-incremental.md

@@ -169,10 +169,15 @@ This method:
         // we use MSAL.NET to get a token to call the API On Behalf Of the current user
         try
         {
-            string accessToken = await tokenAcquisition.GetAccessTokenOnBehalfOfUser(HttpContext, scopes);
+            string accessToken = await tokenAcquisition.GetAccessTokenForUserAsync(scopes);
             dynamic me = await CallGraphApiOnBehalfOfUser(accessToken);
             return me.userPrincipalName;
         }
+        catch (MicrosoftIdentityWebChallengeUserException ex)
+        {
+            await tokenAcquisition.ReplyForbiddenWithWwwAuthenticateHeaderAsync(scopes, ex.MsalUiRequiredException);
+            return string.Empty;
+        }
         catch (MsalUiRequiredException ex)
         {
             await tokenAcquisition.ReplyForbiddenWithWwwAuthenticateHeaderAsync(scopes, ex);

2. Web API now calls Microsoft Graph/README.md

@@ -338,10 +338,15 @@ This method:
         // we use MSAL.NET to get a token to call the API On Behalf Of the current user
         try
         {
-            string accessToken = await tokenAcquisition.GetAccessTokenOnBehalfOfUser(HttpContext, scopes);
+            string accessToken = await tokenAcquisition.GetAccessTokenForUserAsync(scopes);
             dynamic me = await CallGraphApiOnBehalfOfUser(accessToken);
             return me.userPrincipalName;
         }
+        catch (MicrosoftIdentityWebChallengeUserException ex)
+        {
+            await tokenAcquisition.ReplyForbiddenWithWwwAuthenticateHeaderAsync(scopes, ex.MsalUiRequiredException);
+            return string.Empty;
+        }
         catch (MsalUiRequiredException ex)
         {
             await tokenAcquisition.ReplyForbiddenWithWwwAuthenticateHeaderAsync(scopes, ex);
@@ -354,7 +359,7 @@ This method:
 
 #### On the Web API side
 
-An interesting piece is how `MsalUiRequiredException` are handled. These exceptions are typically sent by Azure AD when there is a need for a user interaction. This can be the case when the user needs to re-sign-in, or needs to grant some additional consent, or to obtain additional claims. For instance, the user might need to do multi-factor authentication required specifically by a specific downstream API. When these exceptions happen, given that the Web API does not have any UI, it needs to challenge the client app passing all the required information, so this client app can handle the interaction with the user.
+An interesting piece is how `MicrosoftIdentityWebChallengeUserException` are handled. These exceptions are typically sent by Azure AD when there is a need for a user interaction. This can be the case when the user needs to re-sign-in, or needs to grant some additional consent, or to obtain additional claims. For instance, the user might need to do multi-factor authentication required specifically by a specific downstream API. When these exceptions happen, given that the Web API does not have any UI, it needs to challenge the client app passing all the required information, so this client app can handle the interaction with the user.
 
 This sample uses the `ReplyForbiddenWithWwwAuthenticateHeaderAsync` available on the `TokenAcquisition` service (part of Microsoft.Identity.Web library), which uses the HttpResponse to:
 

2. Web API now calls Microsoft Graph/TodoListService/Controllers/TodoListController.cs

@@ -97,6 +97,11 @@ public async Task<string> CallGraphApiOnBehalfOfUser()
                 dynamic me = await CallGraphApiOnBehalfOfUser(accessToken);
                 return me.UserPrincipalName;
             }
+            catch (MicrosoftIdentityWebChallengeUserException ex)
+            {
+                await _tokenAcquisition.ReplyForbiddenWithWwwAuthenticateHeaderAsync(scopes, ex.MsalUiRequiredException);
+                return string.Empty;
+            }
             catch (MsalUiRequiredException ex)
             {
                 await _tokenAcquisition.ReplyForbiddenWithWwwAuthenticateHeaderAsync(scopes, ex);

2. Web API now calls Microsoft Graph/TodoListService/TodoListService.csproj

@@ -11,7 +11,7 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Identity.Web" Version="0.2.1-preview" />
+    <PackageReference Include="Microsoft.Identity.Web" Version="0.2.2-preview" />
     <PackageReference Include="Microsoft.Graph" Version="3.8.0" />
   </ItemGroup>
 

4.-Console-app-calls-web-API-with-PoP/Microsoft.Identity.Web.Future/Microsoft.Identity.Web.Future.csproj

@@ -41,7 +41,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Identity.Web" Version="0.2.1-preview" />
+    <PackageReference Include="Microsoft.Identity.Web" Version="0.2.2-preview" />
     <PackageReference Include="Microsoft.IdentityModel.Protocols.SignedHttpRequest" Version="6.7.1" />
     <PackageReference Include="System.Collections" Version="4.3.0" />
     <PackageReference Include="Microsoft.IdentityModel.JsonWebTokens" Version="6.7.1" />