C#集成Microsoft Teams会议遇BadRequest错误求助

错误核心原因 #

你当前使用的是客户端凭据授权流（AcquireTokenForClient），这种认证方式属于应用级权限，没有关联具体的用户身份。而/me端点只能在委派授权流下使用——它代表当前登录的用户，客户端流里不存在"当前用户"的概念，因此触发BadRequest错误。

解决方案一：改用委派授权流（适合需以特定用户身份创建会议的场景） #

这种方式需要用户登录授权，适合有交互界面的应用。

1. 在Azure AD应用注册中配置委派权限：添加OnlineMeetings.ReadWrite并完成管理员同意
2. 修改认证及API调用代码：

string clientId = "";
string tenantId = "";
string redirectUri = "http://localhost"; // 需与AzureAD中配置的重定向URI一致

var publicClientApp = PublicClientApplicationBuilder
    .Create(clientId)
    .WithTenantId(tenantId)
    .WithRedirectUri(redirectUri)
    .Build();

// 声明所需的委派权限
string[] scopes = { "OnlineMeetings.ReadWrite" };

// 交互式获取令牌（会弹出用户登录窗口）
var result = await publicClientApp.AcquireTokenInteractive(scopes)
    .ExecuteAsync();

var graphServiceClient = new GraphServiceClient(new DelegateAuthenticationProvider(async (requestMessage) =>
{
    requestMessage.Headers.Authorization = new AuthenticationHeaderValue("Bearer", result.AccessToken);
}));

// 创建会议（此时可正常使用/me端点）
var onlineMeeting = new OnlineMeeting
{
    StartDateTime = DateTimeOffset.UtcNow.AddMinutes(5),
    EndDateTime = DateTimeOffset.UtcNow.AddHours(1),
    Subject = "Teams Meeting created via Graph API",
};

var createdMeeting = await graphServiceClient.Me.OnlineMeetings
    .Request()
    .AddAsync(onlineMeeting);

Console.WriteLine($"Meeting created with ID: {createdMeeting.Id}");
Console.WriteLine($"Join URL: {createdMeeting.JoinWebUrl}");

解决方案二：保留客户端凭据流，指定具体用户（适合后台无交互服务场景） #

这种方式无需用户登录，适合后台服务自动创建会议。

1. 在Azure AD应用注册中配置应用级权限：添加OnlineMeetings.ReadWrite.All并完成管理员同意
2. 修改API调用代码，将/me替换为具体用户ID或用户主体名称（UPN）：

string clientId = "";
string clientSecret = "";
string tenantId = "";
string targetUserId = "user@yourdomain.com"; // 要创建会议的用户UPN或ID

var confidentialClientApp = ConfidentialClientApplicationBuilder
    .Create(clientId)
    .WithClientSecret(clientSecret)
    .WithAuthority(new Uri($"https://login.microsoftonline.com/{tenantId}"))
    .Build();

var scopes = new string[] { "https://graph.microsoft.com/.default" };

var result = await confidentialClientApp.AcquireTokenForClient(scopes)
    .ExecuteAsync();

var graphServiceClient = new GraphServiceClient(new DelegateAuthenticationProvider(async (requestMessage) =>
{
    requestMessage.Headers.Authorization = new AuthenticationHeaderValue("Bearer", result.AccessToken);
}));

var onlineMeeting = new OnlineMeeting
{
    StartDateTime = DateTimeOffset.UtcNow.AddMinutes(5),
    EndDateTime = DateTimeOffset.UtcNow.AddHours(1),
    Subject = "Teams Meeting created via Graph API",
};

// 替换/me为具体用户
var createdMeeting = await graphServiceClient.Users[targetUserId].OnlineMeetings
    .Request()
    .AddAsync(onlineMeeting);

Console.WriteLine($"Meeting created with ID: {createdMeeting.Id}");
Console.WriteLine($"Join URL: {createdMeeting.JoinWebUrl}");

内容的提问来源于stack exchange，提问作者Yogesh Shinde