[Feature?] Missing AppIdentityToken from WebServices.Auth

[Harkole]

I was hoping to use the package to perform the AppIdentityToken routine provided at https://docs.microsoft.com/en-us/outlook/add-ins/validate-an-identity-token [code shown below] but I can't seem to find the "Auth" namespaces.

using Microsoft.Exchange.WebServices.Auth.Validation;

AppIdentityToken ValidateIdentityToken(string rawToken, string expectedAudience)
{
    try
    {
        AppIdentityToken appIdToken = AuthToken.Parse(rawToken) as AppIdentityToken;
        appIdToken.Validate(new Uri(expectedAudience));

        // No exception, validation succeeded
        return appIdToken;
    }
    catch (TokenValidationException ex)
    {
        throw new Exception(string.Format("Token validation failed: {0}", ex.Message));
    }
}

I'm hoping you'll tell me I'm being blind! If it's not implemented is there any plan to implement? I've got a API that's pretty much complete and have been asked to add basic Outlook Web Plugin calls to it but the whole thing is written in .Net Core.

[Blackbaud-AdamHickey]

@Harkole Were you able to resolve this? I have the same issue.

[Will-Blackburn]

@Blackbaud-AdamHickey I've just had a look back at the project (it's been archived off) and I don't think I did looking at the code. However, we have moved over to looking at the Microsoft Graph API as it provides exactly what we need and in addition is easier for the end user/client to setup/manage.

I can't remember where exactly but I did see something about EWS being discontinued pretty soon

[Blackbaud-AdamHickey]

Interesting. I'll check it out.

[svrooij]

I can't remember where exactly but I did see something about EWS being discontinued pretty soon

You’re wrong, they are only discontinuing the basic authentication again EWS in Office 365. See https://techcommunity.microsoft.com/t5/Exchange-Team-Blog/Upcoming-changes-to-Exchange-Web-Services-EWS-API-for-Office-365/ba-p/608055

EWS will continue to work on premise and if you switch the authentication to some other scheme (like oauth tokens or some other supported scheme)