VB.NET控制台应用通过MS Graph发共享邮箱邮件遇404错误求助

核心问题诊断 #

你遇到的404错误本质是Graph API无法定位指定的共享邮箱对象，403则是权限未正确授予。结合测试结果，主要原因集中在发件人标识错误、权限配置偏差、API端点使用不当这几点。

具体解决方案 #

1. 替换发件人标识为共享邮箱的Object ID或UPN #

共享邮箱在Azure AD中以用户对象存在，但直接用邮箱地址可能无法被Graph正确识别（部分场景下邮箱地址≠用户主体名称UPN）。

• 登录Azure门户→Azure AD→用户→找到目标共享邮箱→复制Object ID或用户主体名称（UPN）
• 将代码中的strSender替换为该值，例如：

  Dim strSender = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" ' 共享邮箱的Object ID
  

2. 确认应用权限配置正确性 #

• 确保Azure应用注册中授予的是应用权限Mail.Send（而非委派权限），且权限作用域是目标共享邮箱（而非全租户）
• 检查权限状态：Azure应用注册→API权限→确认权限已被管理员同意（状态显示“已授予”）

3. 调整API请求参数 #

针对共享邮箱，SaveToSentItems = True可能触发额外权限校验，建议暂时关闭：

.SaveToSentItems = False

4. 验证代理连通性 #

确保代理服务器能正常访问https://graph.microsoft.com，可通过测试GET /users/{sharedMailboxObjectId}端点，确认能返回共享邮箱信息，排除代理拦截或网络问题。

修正后的完整代码 #

Imports Microsoft.Graph
Imports Azure.Identity
Imports System.Security.Cryptography.X509Certificates
Imports System.Net.Http
Imports System.Net
Imports Microsoft.Graph.Models
Imports Azure.Core.Pipeline


Module ModuleTest

    Public Sub Start()
        ' MS Graph API连接信息
        Dim tenantId As String = "inserttenantid"
        Dim clientId As String = "insertclientid"

        ' 证书配置
        Dim certificatePath As String = "C:\...\insertcertificatepath.pfx"
        Dim certificatePassword As String = "insertpassword"

        ' 代理服务器配置
        Dim proxy As New WebProxy("http://insertproxyserverorganization.com:insertport/")
        proxy.Credentials = CredentialCache.DefaultNetworkCredentials

        ' 配置HttpClientHandler
        Dim handler As New HttpClientHandler() With {
            .Proxy = proxy,
            .UseProxy = True
        }

        ' 导入证书
        Dim certificate As New X509Certificate2(certificatePath, certificatePassword)

        ' 创建凭证与Graph客户端
        Dim clientCertificateCredential As New ClientCertificateCredential(tenantId, clientId, certificate, New TokenCredentialOptions With {.Transport = New HttpClientTransport(handler)})
        Dim graphServiceClient As New GraphServiceClient(clientCertificateCredential)

        ' 发送邮件
        Try
            ' 使用共享邮箱的Object ID或UPN
            Dim strSender = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" 
            SendEmail(strSender, "TestHeader", "TestContent", "somerecipient@mailadress.com", graphServiceClient).Wait()
        Catch ex As Exception
            Console.WriteLine($"发送邮件出错: {ex.Message}")
            ' 打印内部错误信息辅助排查
            If ex.InnerException IsNot Nothing Then
                Console.WriteLine($"内部错误: {ex.InnerException.Message}")
            End If
        End Try

    End Sub

    Private Async Function SendEmail(sender As String, subject As String, content As String, recipient As String, graphServiceClient As GraphServiceClient) As Task

        Dim requestBody As New Microsoft.Graph.Users.Item.SendMail.SendMailPostRequestBody With {
            .Message = New Message With {
                .Subject = subject,
                .Body = New ItemBody With {
                    .ContentType = BodyType.Html,
                    .Content = content
                },
                .ToRecipients = New List(Of Recipient) From {
                    New Recipient With {
                        .EmailAddress = New EmailAddress With {
                            .Address = recipient
                        }
                    }
                }
        },
        .SaveToSentItems = False} ' 关闭共享邮箱的已发送保存

        ' 发送邮件请求
        Await graphServiceClient.Users(sender).SendMail().PostAsync(requestBody)

    End Function

End Module

额外排查步骤 #

• 用Graph Explorer测试：使用客户端证书凭证调用GET /users/{sharedMailboxObjectId}，确认能返回邮箱信息；若正常，再测试POST /users/{sharedMailboxObjectId}/sendMail请求验证发送功能。
• 检查共享邮箱状态：确认邮箱未被软删除、处于活跃状态，且托管在Exchange Online（非本地Exchange）。

内容的提问来源于stack exchange，提问作者mazzdh