How to display the users photo from when using Azure AD Authentication

[Clifra-Jones]

In order to show the photo you must retrieve the photo from the tenant using the URL fromthe user object provided by Azure AD.

If you are like me and you use 2 different applications , one for testing and one for production you goig to want to put the picture retrieval code in a function

function Get-UserPhoto {
    param(
        [string]$AccessToken,
        [string]$PhotoUrl
    )

    try {
        $headers = @{
            'Authorization' = "Bearer $AccessToken"
            'Content-Type' = 'application/json'
        }

        #Write-PodeHost $PhotoUrl

        $response = Invoke-WebRequest -Uri $PhotoUrl -Headers $Headers -Method Get
        #Write-PodeHost $photoResponse
        if ($response.StatusCode -eq 200 -and $response.Content.Length -gt 0) {
            $photoBytes = $response.Content

            if ($photoBytes) {
                $Base64Photo = [Convert]::ToBase64String($photoBytes)
                Write-PodeHost $Base64Photo
                return "data:image/jpeg;base64,$Base64Photo"
            }
        }
    } catch {
        return $null
    }

    return $null
}

Then in your authentication scheme you'll want to do this.

if ($user.picture -and $accessToken) {
    $avatarUrl = Get-UserPhoto -AccessToken $accessToken -PhotoUrl $user.picture
}

$user | Add-Member -MemberType NoteProperty -Name avatar -Value $avatarUrl

Set-PodeWebAuth -UsernameProperty $user.name -Authentication 'Login' -AvatarProperty avatar

You should end up with this.