sp-dev-fx-webparts/samples/react-bot-framework-sso/bot/README.md

# Authentication Bot Utilizing Microsoft Graph

Bot Framework v4 bot authentication using Microsoft Graph sample

This bot has been created using [Bot Framework](https://dev.botframework.com). It shows how to use the bot authentication capabilities of Azure Bot Service. In this sample we are assuming the OAuth 2 provider is Azure Active Directory v2 (AADv2) and are utilizing the Microsoft Graph API to retrieve data about the user. [Check here](https://docs.microsoft.com/en-us/azure/bot-service/bot-builder-authentication?view=azure-bot-service-4.0&tabs=csharp) for information about getting an AADv2
application setup for use in Azure Bot Service. The [scopes](https://developer.microsoft.com/en-us/graph/docs/concepts/permissions_reference) used in this sample are the following:

-  `User.Read`

## Prerequisites

-  [Node.js](https://nodejs.org) version 10.14 or higher

   ```bash
   # determine node version
   node --version
   ```

-  Update `.env` with required configuration settings
   -  MicrosoftAppId
   -  MicrosoftAppPassword
   -  ConnectionName

## To try this sample

-  Clone the repository

   ```bash
   git clone [Placeholder]
   ```

-  In a terminal, navigate to `[Placeholder]`

   ```bash
   cd [Placeholder]
   ```

-  Install modules

   ```bash
   npm install
   ```

-  Start the bot

   ```bash
   npm start
   ```

## Testing the bot using Bot Framework Emulator

[Microsoft Bot Framework Emulator](https://github.com/microsoft/botframework-emulator) is a desktop application that allows bot developers to test and debug their bots on localhost or running remotely through a tunnel.

-  Install the Bot Framework Emulator from [here](https://github.com/microsoft/botframework-emulator/releases)
-  In Bot Framework Emulator Settings, enable `Use a sign-in verification code for OAuthCards` to receive the magic code

### Connect to bot using Bot Framework Emulator

-  Launch Bot Framework Emulator
-  File -> Open Bot
-  Enter a Bot URL of `http://localhost:3978/api/messages

## Authentication

This sample uses the bot authentication capabilities of Azure Bot Service, providing features to make it easier to develop a bot that
authenticates users to various identity providers such as Azure AD (Azure Active Directory), GitHub, Uber, and so on. These updates also
take steps towards an improved user experience by eliminating the magic code verification for some clients and channels.
It is important to note that the user's token does not need to be stored in the bot. When the bot needs to use or verify the user has a valid token at any point the OAuth prompt may be sent. If the token is not valid they will be prompted to login.

## Microsoft Graph API

This sample demonstrates using Azure Active Directory v2 as the OAuth2 provider and utilizes the Microsoft Graph API.
Microsoft Graph is a Microsoft developer platform that connects multiple services and devices. Initially released in 2015,
the Microsoft Graph builds on Office 365 APIs and allows developers to integrate their services with Microsoft products
including Windows, Office 365, and Azure.

## Deploy the bot to Azure

To learn more about deploying a bot to Azure, see [Deploy your bot to Azure](https://aka.ms/azuredeployment) for a complete list of deployment instructions.

## GraphError 404: ResourceNotFound, Resource could not be discovered

This error may confusingly present itself if either of the following are true:

-  You're using an email ending in `@microsoft.com`, and/or
-  Your OAuth AAD tenant is `microsoft.onmicrosoft.com`.

## Testing Direct Line token generation
- [Connect to Direct Line](https://docs.microsoft.com/en-us/azure/bot-service/bot-service-channel-connect-directline?view=azure-bot-service-4.0)

- Add ‘Direct Line Secret’ to `.env`
    ```bash
    DirectLineSecret=YOUR_DIRECT_LINE_SECRET
    ```
- Start the bot

    ```bash
    npm start
    ```
- Open [PostMan](https://www.postman.com/) and setup a post request to http://localhost:3978/directline/token
 with the following json request body:
    ```
    {
        "user": "USER_ID"
    }
    ```
    Then you can see the Direct Line token generated with YOUR_DIRECT_LINE_SECRET and USER_ID:
    ```
    {
        "conversationId": "XXXXX",
        "token": "XXXXX",
        "expires_in": 3600
    }
    ```

## Further Reading

-  [Bot Framework Documentation](https://docs.botframework.com)
-  [Bot Basics](https://docs.microsoft.com/azure/bot-service/bot-builder-basics?view=azure-bot-service-4.0)
-  [Microsoft Graph API](https://developer.microsoft.com/en-us/graph)
-  [MS Graph Docs](https://developer.microsoft.com/en-us/graph/docs/concepts/overview) and [SDK](https://github.com/microsoftgraph/msgraph-sdk-dotnet)
-  [Activity processing](https://docs.microsoft.com/en-us/azure/bot-service/bot-builder-concept-activity-processing?view=azure-bot-service-4.0)
-  [Azure Bot Service Introduction](https://docs.microsoft.com/azure/bot-service/bot-service-overview-introduction?view=azure-bot-service-4.0)
-  [Azure Bot Service Documentation](https://docs.microsoft.com/azure/bot-service/?view=azure-bot-service-4.0)
-  [.NET Core CLI tools](https://docs.microsoft.com/en-us/dotnet/core/tools/?tabs=netcore2x)
-  [Azure CLI](https://docs.microsoft.com/cli/azure/?view=azure-cli-latest)
-  [Azure Portal](https://portal.azure.com)
-  [Language Understanding using LUIS](https://docs.microsoft.com/en-us/azure/cognitive-services/luis/)
-  [Channels and Bot Connector Service](https://docs.microsoft.com/en-us/azure/bot-service/bot-concepts?view=azure-bot-service-4.0)
-  [Restify](https://www.npmjs.com/package/restify)
-  [dotenv](https://www.npmjs.com/package/dotenv)