angular – 为什么我的API管理不使用AD B2C自动化我的应用程序？

在我的配置环境下面：

AD B2C

在我的AD B2C中,我创建了两个应用程序：

> DeveloperPortal – 用于开发人员门户中的配置授权.
> MyClient – 用于内部的配置授权.

API网关

我创建了一个API Management.在API导入之后,我添加了一个如下策略：

<validate-jwt header-name="Authorization" failed-validation-httpcode="401" failed-validation-error-message="Unauthorized. Access token is missing or invalid.">
            <openid-config url="https://login.microsoftonline.com/{myTenantAzureId}/.well-known/openid-configuration?p={myPolicies}" />
</validate-jwt>

我的客户

我的客户是Angular 4应用程序.我正在使用MSAL.js Microsoft官方库.

这是我的授权服务TypeScript类：

import { Injectable } from '@angular/core';
declare var bootbox: any;
declare var Msal: any;

@Injectable()
export class MsalService {
  public access_token: string;
  private logger = new Msal.Logger(this.loggerCallback,{ level: Msal.LogLevel.Verbose });

  tenantConfig = {
    tenant: "{myTenant}.onmicrosoft.com",clientID: '{MyClientClientId}',signUpSignInPolicy: "{myPolicies}",b2cScopes: ["openid"]
  };

  options = {
    logger: this.logger,postLogoutRedirectUri: window.location.protocol + "//" + window.location.host
  }

  //authority = null;
  authority = "https://login.microsoftonline.com/tfp/" + this.tenantConfig.tenant + "/" + this.tenantConfig.signUpSignInPolicy;


  clientApplication = new Msal.UserAgentApplication(
    this.tenantConfig.clientID,this.authority,this.authCallback,this.options
  );

  public login(callback: Function): void {
    var _this = this;
    this.clientApplication.loginPopup(this.tenantConfig.b2cScopes).then(function (idToken: any) {
      _this.clientApplication.acquireTokenSilent(_this.tenantConfig.b2cScopes).then(
        function (accessToken: any) {
          _this.access_token = accessToken;
          localStorage.setItem("access_token",accessToken);
          if (callback) {
            callback(accessToken);
          }
        },function (error: any) {
          _this.clientApplication.acquireTokenPopup(_this.tenantConfig.b2cScopes).then(
            function (accessToken: any) {
              _this.access_token = accessToken;
              console.log(accessToken);
            },function (error: any) {
              bootbox.alert("Error acquiring the popup:n" + error);
            });
        })
    },function (error: any) {
      console.log(error);
      bootbox.alert("Error during login:n" + error);
    });
  }

  public logout(callback: Function): void {
    this.clientApplication.logout();
    if (callback) {
      callback();
    }
  }

  private loggerCallback(logLevel,message,piiLoggingEnabled) {
    console.log(message);
  }
  private authCallback(errorDesc: any,token: any,error: any,tokenType: any) {
    if (token) {
    }
    else {
      console.error(error + ":" + errorDesc);
    }
  }
}

问题

如果我尝试使用带有访问令牌的Authorization标头调用一个API Management的API,我会收到以下错误：

{ "statusCode": 401,"message": "Unauthorized. Access token is missing or invalid." }

但如果我尝试直接通过Developer Portal访问,我可以成功调用相同的API.

为什么我的API管理器不授权我的应用程序？

非常感谢