in Facebook/WebApp/Auth/AuthenticateRequest.cs [62:76]
private static bool CheckIfCallerClaimIsAuthorized(IEnumerable<Claim> currentClaims)
{
bool isAuthorized = false;
// application id of microsoft o365 import connector platform
string importClientId = "570d0bec-d001-4c4e-985e-3ab17fdc3073";
Claim appIdClaim = currentClaims.FirstOrDefault(c => c != null && c.Type != null && c.Type.ToLower().Equals("appid"));
if (appIdClaim != null && !string.IsNullOrEmpty(appIdClaim.Value))
{
isAuthorized = importClientId.Equals(appIdClaim.Value);
}
string tenantId = ClaimsPrincipal.Current.FindFirst("http://schemas.microsoft.com/identity/claims/tenantid")?.Value;
return isAuthorized && (tenantId != null);
}