oauth-2.0 - How to update Office 365 SharePoint App Client Secret after it expired?

Question

In MSDN http://msdn.microsoft.com/en-us/library/office/jj220036(v=office.15).aspx, Office 365 requires to update the client secret before it expired. But we forgot to do this before it expired. Now after we updated a new client secret, added a new one first and then removed the old expired one, the app in some sites does not work and the app in some sites works well. The error is we cannot get the accesstoken from the content token with the new client secret.

System.Exception: SharePoint2013Authentication Exception: System.IdentityModel.Tokens.SecurityTokenException: Invalid JWT token. Could not resolve issuer token.

at Microsoft.IdentityModel.S2S.Tokens.JsonWebSecurityTokenHandler.ReadTokenCore(String token, Boolean isActorToken)

Answer 1

需要一些时间才能生效 - 在我的案例应用程序中。12小时。它已立即开始进行新安装，但已安装应用程序的租户必须等待刷新。

使用“最新”的 TokenHelper.cs，它可以在配置文件 ( http://msdn.microsoft.com/en-us/library/office/dn726681(v=office.15)中使用新旧秘密。 aspx#sectionSection2）。当旧的还没有到期时，它会起作用。