microsoftgraph / microsoftgraph/msgraph-metadata
Add resourceAppId property to oAuth2PermissionGrant
Nobody has claimed this yet.
- Dominant language
- XSLT
- Stars
- 166
- Forks
- 55
- Avg merge
- 16h 12m
- Merged PRs (30d)
- 14
Description
To check what permissions are granted by our clients, we use application mode and get the servicePrincipal, this works fine for the permissions of type applications. The problem lies in the delegated permissions. Currently, oAuth2PermissionGrant exposes only resourceId (servicePrincipalId which is different from tenant to tenant) and no resourceAppId. So we need to get this servicePrincipal by this resourceId to get the appId. The problem here is that we are not allowed to do this unless we have an Application.Read.All which we cannot ask or justify to our clients because it is an elevated permission.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the metadata entry for oAuth2PermissionGrant; the issue names no file or test, so first trace how this resource is represented and exposed in generated client metadata. Confirm the resourceAppId property is available for delegated permissions and that clients can identify the resource without requiring Application.Read.All.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- api, authorization
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100