"error_description":"ID3035: The request was not valid or is malformed."

[aathar]

Hi

I am trying to connect to sharepoint using pnpCore. I have added the app registration, given appropriate permissions and generated and attached the certificate too. I am trying to use the Certificate Based Authentication, since client id / client secret authentication is not recommended.

Here is my pnp Core code:
Startup.cs

`   
public void ConfigureServices(IServiceCollection services)
        {            services.AddControllers();
            services.AddSwaggerGen(c =>
            {
                c.SwaggerDoc("v1", new OpenApiInfo { Title = "WebApplication1", Version = "v1" });
            });


            var azureSettings = new AzureSettings();
            Configuration.GetSection("AzureSettings:Values").Bind(azureSettings);

            services.AddPnPCore(options => {
                // Disable telemetry because of mixed versions on AppInsights dependencies
                options.DisableTelemetry = true;
                // Configure an authentication provider with certificate (Required for app only)
                var authProvider = new X509CertificateAuthenticationProvider(azureSettings.ClientId, azureSettings.TenantId,  
                    StoreName.My, StoreLocation.CurrentUser, 
                    azureSettings.CertificateThumbprint);


                // And set it as default
                options.DefaultAuthenticationProvider = authProvider;
                // Add a default configuration with the site configured in app settings
                options.Sites.Add("Default", new PnP.Core.Services.Builder.Configuration.PnPCoreSiteOptions
                {
                    SiteUrl = azureSettings.SiteUrl,
                    AuthenticationProvider = authProvider
                });
            });
}
`

MyController

` [HttpGet]
        public async Task<IEnumerable<int>> Get()
        {

            using (var pnpContext = await _pnpContextFactory.CreateAsync("Default")) **Getting Error on this line**
            {
                IList sharedDocuments = await pnpContext.Web.Lists.GetByTitleAsync("Documents", l => l.RootFolder);
                var sharedDocumentsFolder = await sharedDocuments.RootFolder.GetAsync(f => f.Files);
                var documents = (from d in sharedDocumentsFolder.Files.AsEnumerable()
                                 select new
                                 {
                                     d.Name,
                                     d.TimeLastModified,
                                     d.UniqueId
                                 }).ToList();
                return new List<int>();

            }
`

appsettings.json

`{
  "Logging": {
    "LogLevel": {
      "Default": "Information",
      "Microsoft": "Warning",
      "Microsoft.Hosting.Lifetime": "Information"
    }
  },
  "AllowedHosts": "*",
  "AzureSettings": {
    "IsEncrypted": false,
    "Values": {
      "AzureWebJobsStorage": "UseDevelopmentStorage=true",
      "FUNCTIONS_WORKER_RUNTIME": "dotnet",
      "SiteUrl": "https://mydomain.sharepoint.com/sites/mysite",
      "TenantId": "My_tenant_Id",
      "ClientId": "My_Client_Id",
      "CertificateThumbprint": "Certificate_Thumbnail",
      "WEBSITE_LOAD_CERTIFICATES": "Certificate_Thumbnail"
    }
  }
}
`

I am getting this error:

`HttpResponseCode: 401
Code: 
Message: {"error_description":"ID3035: The request was not valid or is malformed."}
ClientRequestId: d0d531a0-7022-1000-9372-16999a23b63b

PnP.Core.SharePointRestServiceException: SharePoint Rest service exception
   at PnP.Core.Services.BatchClient.ExecuteSharePointRestInteractiveAsync(Batch batch)
   at PnP.Core.Services.BatchClient.ExecuteBatch(Batch batch)
   at PnP.Core.Model.BaseDataModel`1.RequestAsync(ApiCall apiCall, HttpMethod method, String operationName)
   at PnP.Core.Services.PnPContextFactory.InitializeContextAsync(PnPContext context, PnPContextOptions options)
   at PnP.Core.Services.PnPContextFactory.CreateAsync(Uri url, IAuthenticationProvider authenticationProvider, CancellationToken cancellationToken, PnPContextOptions options)
   at PnP.Core.Services.PnPContextFactory.CreateAsync(String name, Action`1 initializeAuthenticationProvider, CancellationToken cancellationToken, PnPContextOptions options)
   at PnP.Core.Services.PnPContextFactory.CreateAsync(String name, PnPContextOptions options)
   at WebApplication1.Controllers.WeatherForecastController.Get() in C:\Users\Athar.Anis\source\repos\Test\WebApplication1\Controllers\WeatherForecastController.cs:line 35
   at lambda_method5(Closure , Object )
   at Microsoft.AspNetCore.Mvc.Infrastructure.ActionMethodExecutor.AwaitableObjectResultExecutor.Execute(IActionResultTypeMapper mapper, ObjectMethodExecutor executor, Object controller, Object[] arguments)
   at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.<InvokeActionMethodAsync>g__Awaited|12_0(ControllerActionInvoker invoker, ValueTask`1 actionResultValueTask)
   at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.<InvokeNextActionFilterAsync>g__Awaited|10_0(ControllerActionInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)
   at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.Rethrow(ActionExecutedContextSealed context)
   at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.Next(State& next, Scope& scope, Object& state, Boolean& isCompleted)
   at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.<InvokeInnerFilterAsync>g__Awaited|13_0(ControllerActionInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)
   at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeFilterPipelineAsync>g__Awaited|19_0(ResourceInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)
   at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeAsync>g__Awaited|17_0(ResourceInvoker invoker, Task task, IDisposable scope)
   at Microsoft.AspNetCore.Routing.EndpointMiddleware.<Invoke>g__AwaitRequestTask|6_0(Endpoint endpoint, Task requestTask, ILogger logger)
   at Microsoft.AspNetCore.Authorization.AuthorizationMiddleware.Invoke(HttpContext context)
   at Swashbuckle.AspNetCore.SwaggerUI.SwaggerUIMiddleware.Invoke(HttpContext httpContext)
   at Swashbuckle.AspNetCore.Swagger.SwaggerMiddleware.Invoke(HttpContext httpContext, ISwaggerProvider swaggerProvider)
   at Microsoft.AspNetCore.Diagnostics.DeveloperExceptionPageMiddleware.Invoke(HttpContext context)

`

I have been trying to figure out what the problem is. I have generated new certificates , have done everything i could, but no luck. Can someone please guide me?

Thanks

[aaronmorgan]

I've started encountering the same problem on code that was working a couple of weeks ago. Did you find an answer behind the error you reported?

[aathar]

Unfortunately i did not find an answer. I ended up using username password instead.

[jansenbe]

@aaronmorgan / @aathar : what permissions did you grant to your Azure AD application? See https://pnp.github.io/pnpcore/demos/README.html#azure-functions for two Azure Function samples that use certificate auth.

[aaronmorgan]

Of these two permissions we didn't have the second one set.

• Microsoft Graph -> Sites.FullControl.All application permission
• SharePoint -> Sites.FullControl.All application permission

Setting the SharePoint permission to Sites.FullControl.All resolved the issue immediately.

Thanks guys.