Delegated permissions using username/password

[Lewin8687]

Hi
I am facing a problem using delegated permissions, but got unauthorized exception.

Stack trace:
at PnP.Core.Services.BatchClient.d__50.MoveNext()
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at PnP.Core.Services.BatchClient.d__36.MoveNext()
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.ConfiguredTaskAwaitable1.ConfiguredTaskAwaiter.GetResult() at PnP.Core.Model.BaseDataModel1.d__93.MoveNext()
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.ConfiguredTaskAwaitable1.ConfiguredTaskAwaiter.GetResult() at PnP.Core.Services.PnPContextFactory.<InitializeContextAsync>d__40.MoveNext() at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at PnP.Core.Services.PnPContextFactory.<CreateAsync>d__35.MoveNext() at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Runtime.CompilerServices.TaskAwaiter1.GetResult()

Here is my setup:

• Azure app granted with these permissions
  

• Added user to the enterprise app

• Filled in correct client id/tenant id/username/password

Any advice? Thanks:)

[jansenbe]

@Lewin8687 : delegated permissions using username+pwd definitely work. Common reason for failure is either something wrong in your configuration file or some issue in the code that adds PnP Core SDK into your project (the AddPnPCore and AddPnPCoreAuthentication methods). See https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-cosmosdb-v2-input?tabs=csharp for documentation. We also have one of our samples using the username + password: see https://pnp.github.io/pnpcore/demos/Demo.RPi/README.html

[Lewin8687]

@jansenbe Yes, scopes are correct, sharepoint allsites is removed. And app Id is set correctly.

[jansenbe]

Might be some internal Syntex API behavior then? If you create a new app do you then again get the exception? Your business logic should be able to handle both scenarios then to be at the safe side.

[Lewin8687]

Yes, I guess so.

I did another test with a new app. I got exceptions when no permissions were added, but after I added and removed permissions, no exceptions anymore but cannot get any item.

It's just a bit tricky to tell whether there is no item or no permissions to get them (I was testing getting classification models in this case).

[Lewin8687]

@jansenbe Sorry, do we have any updates? Thanks!

[jansenbe]

@Lewin8687 : no updates from my side here. Guess this is by design