调用login.microsoftonline.com获取Token时遇Tenant not found错误求助

1. 修复HttpClient BaseAddress与请求路径的拼接问题 #

HttpClient的BaseAddress如果不以斜杠结尾，拼接相对路径时会出现URL合并错误。例如你的代码中BaseAddress是https://login.microsoftonline.com（无末尾斜杠），请求路径是tenant-id/oauth2/v2.0/token（无开头斜杠），最终拼接出的URL会变成https://login.microsoftonline.comtenant-id/oauth2/v2.0/token，这会直接导致租户ID识别失败。

修复方式二选一：

• 给BaseAddress加上末尾斜杠：

Uri baseUri = new Uri("https://login.microsoftonline.com/");

• 让请求路径以斜杠开头：

requestMessage = new HttpRequestMessage(HttpMethod.Post, "/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/oauth2/v2.0/token");

2. 移除请求路径中的换行/空格 #

你的代码中请求路径字符串被拆分成两行，可能引入了隐藏的换行符或空格，导致租户ID无效。确保请求路径是完整的单行字符串：

requestMessage = new HttpRequestMessage(HttpMethod.Post, "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/oauth2/v2.0/token");

3. 改用Form参数传递Client ID和Secret（推荐） #

虽然client_credentials流支持Basic Auth方式传递客户端凭证，但更规范且不易出错的方式是将client_id和client_secret作为Form数据传递，这也是Postman默认采用的方式。

修改代码如下：

// 移除原Basic Auth相关代码
// var authenticationString = $"{DefaultConfig.ClientId}:{DefaultConfig.ClientSecret}";
// var base64EncodedAuthenticationString = Convert.ToBase64String(System.Text.ASCIIEncoding.ASCII.GetBytes(authenticationString));
// requestMessage.Headers.Authorization = new AuthenticationHeaderValue("Basic", base64EncodedAuthenticationString);

// 将客户端凭证加入Form参数
var values = new List<KeyValuePair<string, string>>();
values.Add(new KeyValuePair<string, string>("grant_type", "client_credentials"));
values.Add(new KeyValuePair<string, string>("scope", "https://analysis.windows.net/powerbi/api/.default"));
values.Add(new KeyValuePair<string, string>("client_id", DefaultConfig.ClientId));
values.Add(new KeyValuePair<string, string>("client_secret", DefaultConfig.ClientSecret));
requestMessage.Content = new FormUrlEncodedContent(values);

4. 清理重复的Accept头 #

代码中重复添加了Accept头，虽然不直接引发错误，但可以清理为更简洁的形式：

client.DefaultRequestHeaders.Accept.Clear();
client.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));

完整修复后的代码示例 #

static HttpClient client = new HttpClient();
Uri baseUri = new Uri("https://login.microsoftonline.com/");
client.BaseAddress = baseUri;
client.DefaultRequestHeaders.Accept.Clear();
client.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));

HttpRequestMessage requestMessage = new HttpRequestMessage(HttpMethod.Post, "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/oauth2/v2.0/token");

var values = new List<KeyValuePair<string, string>>();
values.Add(new KeyValuePair<string, string>("grant_type", "client_credentials"));
values.Add(new KeyValuePair<string, string>("scope", "https://analysis.windows.net/powerbi/api/.default"));
values.Add(new KeyValuePair<string, string>("client_id", DefaultConfig.ClientId));
values.Add(new KeyValuePair<string, string>("client_secret", DefaultConfig.ClientSecret));
requestMessage.Content = new FormUrlEncodedContent(values);

HttpResponseMessage response = await client.SendAsync(requestMessage);
var result = await response.Content.ReadAsStringAsync();

内容的提问来源于stack exchange，提问作者Naqi