Skip to content

Issue fetching the access token using Token Exchange URL as part of OAuth Connection for Azure Bot Service #145

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Santhosh0505 opened this issue Mar 25, 2025 · 2 comments
Assignees

Comments

@Santhosh0505
Copy link

Hi Team,

I have tried to test the authorization agent sample, the Azure bot OAuth configurations work perfectly fine which helps in generating OBO based JWT token.

But when I provide the Token Exchange URL as part of the OAuth settings in the Azure Bot service, seems the current Agent SDK library is not able to process the Token Exchange URL for fetching the token. Instead it is asking for the user to provide consent and login manually for the token to be generated.

Could you please provide any steps if I am missing anything where the Azure Bot Service OAuth settings can be used to generate the JWT token in the bot using the Exchange Token URL which is provided as Azure Bot service Auth URL. Using this the bot should not be asking the end user to manually login when the user is interacting with the Agent SDK bot from the Teams channel.

@tracyboehrer
Copy link
Member

@Santhosh0505 I see this. Not ignoring. What specifically are you trying to do? I ask because we just added an OBO Exchange, but haven't documented the setup. So probably not your fault.

@Santhosh0505
Copy link
Author

@tracyboehrer Here I wanted to configure the OAuth in such a way that the user when logged in Teams and chatting with the bot, the bot should be automatically generate a access token on behalf of user with scope as https://api.powerplatform.com.

I want to use this token further in the chatbot to connect to Power Platform API on behalf of user.

I am trying to configure the OAuth Connection with scope as https://api.powerplatform.com/.default. And for this the user is asked to explicitly login with a login card send to user on Teams. And then the token which is generated is right now working for me to connect to Power Platform API scope.

But I want to skip the user to explicitly login as the user is already logged into to Teams and chatting with the bot.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants