Ошибка authorization has been denied for this request

<Error>
    <Message>Authorization has been denied for this request.</Message>
</Error>

0

Assignees

Comments

{
   "stack": "Error: Authorization has been denied for this request.n    at new RestError (D:\home\site\wwwroot\node_modules\@azure\ms-rest-js\dist\msRest.node.js:1397:28)n    at D:\home\site\wwwroot\node_modules\@azure\ms-rest-js\dist\msRest.node.js:1849:37n    at process._tickCallback (internal/process/next_tick.js:68:7)",
   "message": "Authorization has been denied for this request.",
   "statusCode": 401,
   "request": {
      "body": {
         "type": "message",
         "serviceUrl": "https://smba.trafficmanager.net/apis/",
         "channelId": "skype",
         "from": {
            "id": "<SNIP>",
            "name": "<SNIP>"
         },
         "conversation": {
            "id": "<SNIP>"
         },
         "recipient": {
            "id": "<SNIP>",
            "name": "<SNIP>"
         },
         "text": "The message that the bot was trying to send to the recipient.",
         "inputHint": "acceptingInput",
         "replyToId": "<SNIP>"
      }
   },
   "response": {
      "body": {
         "message": "Authorization has been denied for this request."
      }
   },
   "body": {
      "message": "Authorization has been denied for this request."
   }
}

{
   "stack": "Error: Authorization has been denied for this request.n    at new RestError (D:\home\site\wwwroot\node_modules\@azure\ms-rest-js\dist\msRest.node.js:1397:28)n    at D:\home\site\wwwroot\node_modules\@azure\ms-rest-js\dist\msRest.node.js:1849:37n    at process._tickCallback (internal/process/next_tick.js:68:7)",
   "message": "Authorization has been denied for this request.",
   "statusCode": 401,
   "request": {
      "body": {
         "type": "message",
         "serviceUrl": "https://smba.trafficmanager.net/apis/",
         "channelId": "skype",
         "from": {
            "id": "28:e7e117fc-904e-4782-af12-dceafb4e9ac0",
            "name": "NRS VIDEO RELAY SERVICE"
         },
         "conversation": {
            "id": "29:1zNwNjv0VsMmllDwoj8tbyE_c_9JawLJZtToLNeskZeJ5z8swuX0MDZIBu9X8Ok-b"
         },
         "recipient": {
            "id": "29:1zNwNjv0VsMmllDwoj8tbyE_c_9JawLJZtToLNeskZeJ5z8swuX0MDZIBu9X8Ok-b",
            "name": "NRS VRSTERP10"
         },
         "text": "<SNIP>",
         "inputHint": "acceptingInput",
         "replyToId": "1580763518872"
      }
   },
   "response": {
      "body": {
         "message": "Authorization has been denied for this request."
      }
   },
   "body": {
      "message": "Authorization has been denied for this request."
   }
} 

const adapter = new BotFrameworkAdapter({
    appId: process.env.MicrosoftAppId,
    appPassword: process.env.MicrosoftAppPassword,
});


adapter.use(async (turnContext, next) => {

    .....
    turnContext.onSendActivities(async (ctx, activities, nextSend) => {
        // Deliver activities
        await nextSend();

        .....
     });

    await next();

    ....

});


// Catch-all for errors.
adapter.onTurnError = async (context, error) => {

    ....

};


MicrosoftAppCredentials.trustServiceUrl('https://smba.trafficmanager.net/apis/', new Date(8640000000000000));

{
    "activityId": "1572800137595",
    "bot": {
        "id": "28:e7e117fc-904e-4782-af12-dceafb4e9ac0",
        "name": "NRS VIDEO RELAY SERVICE"
    },
    "channelId": "skype",
    "conversation": {
        "id": "29:1qM0tG1lMQtJQAGw1E4iR9KpzvSnYbiA1w2HkIctUBBM"
    },
    "serviceUrl": "https://smba.trafficmanager.net/apis/",
    "user": {
        "id": "29:1qM0tG1lMQtJQAGw1E4iR9KpzvSnYbiA1w2HkIctUBBM",
        "name": "Alex"
    }
}

Many of the APIs that require Access Approval or are Private require secondary authentication information. This is usually a Basic Authorization Header (a base64 encoded ucsbNetId:password combination) which will be used by the backend system to authenticate who or what application is calling into the API service. As a client you would be aware if a system required secondary authentication information, as you would be asked to provide a UcsbNetId when applying for access.

When the service is called, if the UcsbNetId/Password combination can’t be authenticated successfully, or the UcsbNetId hasn’t been authorized to access the API a common error message of "message": "Authorization has been denied for this request." may be replied.

Some common mistakes that lead to this error message are:

• Not including a Basic Authorization Header.
• Forgetting to base64 encode the ucsbNetId:password combination.
• The API provider hasn’t added your ucsbNetId to the authorization systems.

If you are sure you’re doing the first two above, please reach out to support@developer.ucsb.edu to see if your application’s ucsbNetId can be added.

• Remove From My Forums

• Question

• User-111502429 posted

  So i made a login with google button, when i click it i get the access token successfully using this 

  /// <reference path="jquery-3.4.1.min.js" />
  function getAccessToken()
  {
      debugger;
      if (location.hash) {
          if (location.hash.split('access_token=')) {
              var accessToken = location.hash.split('access_token=')[1].split('&')[0];
              if (accessToken)
              {
                  isUserRegistered(accessToken);
              }
          }
      }
  }
  
  function isUserRegistered(accessToken)
  {
      $.ajax({
          url: '/api/Account/UserInfo',
          method: 'GET',
              headers:
              {
              'content-type': 'application/JSON',
              'Authorization': 'Bearer ' + accessToken
              },
          success: function (response)
          {
              debugger;
              if (response.HasRegistered)
              {
                  debugger;
                  localStorage.setItem('accessToken', accessToken);
                  localStorage.setItem('userName', response.Email);
                  window.location.href = "/api/TestController";
              }
              else
              {
                  signupExternalUser(accessToken);
              }
          }
          });
  
      function signupExternalUser(accessToken)
      {
          $.ajax({
              url: '/api/Account/RegisterExternal',
              method: 'POST',
              headers: {
                  'content-type': 'application/json',
                  'Authorization': 'Bearer ' + accessToken
              },
              success: function () {
                  debugger;
                  window.location.href = "/api/Account/ExternalLogin?provider=Google&response_type=token&client_id=self&redirect_uri=";  //here the uri is filled but i removed it for now
              }
          });
  
      }
  
  }

  as u can see in the code i said that after successfull login i want it to redirect me api/TestController  but i get «Authorization has been denied for this request»  why is that??

  Here is my startup.Auth

      public partial class Startup
      {
          public static OAuthAuthorizationServerOptions OAuthOptions { get; private set; }
  
          public static string PublicClientId { get; private set; }
  
          // For more information on configuring authentication, please visit https://go.microsoft.com/fwlink/?LinkId=301864
          public void ConfigureAuth(IAppBuilder app)
          {
              // Configure the db context and user manager to use a single instance per request
              app.CreatePerOwinContext(ApplicationDbContext.Create);
              app.CreatePerOwinContext<ApplicationUserManager>(ApplicationUserManager.Create);
  
              // Enable the application to use a cookie to store information for the signed in user
              // and to use a cookie to temporarily store information about a user logging in with a third party login provider
              app.UseCookieAuthentication(new CookieAuthenticationOptions());
              app.UseExternalSignInCookie(DefaultAuthenticationTypes.ExternalCookie);
  
              // Configure the application for OAuth based flow
              PublicClientId = "self";
              OAuthOptions = new OAuthAuthorizationServerOptions
              {
                  TokenEndpointPath = new PathString("/Token"),
                  Provider = new ApplicationOAuthProvider(PublicClientId),
                  AuthorizeEndpointPath = new PathString("/api/Account/ExternalLogin"),
                  AccessTokenExpireTimeSpan = TimeSpan.FromDays(14),
                  // In production mode set AllowInsecureHttp = false
                  AllowInsecureHttp = true
              };
  
              // Enable the application to use bearer tokens to authenticate users
              app.UseOAuthBearerTokens(OAuthOptions);
  
              // Uncomment the following lines to enable logging in with third party login providers
              //app.UseMicrosoftAccountAuthentication(
              //    clientId: "",
              //    clientSecret: "");
  
              //app.UseTwitterAuthentication(
              //    consumerKey: "",
              //    consumerSecret: "");
  
              //app.UseFacebookAuthentication(
              //    appId: "",
              //    appSecret: "");
  
              app.UseGoogleAuthentication(new GoogleOAuth2AuthenticationOptions()
              {
                  ClientId = "fsdfsfs", // consider them filled correctly
                  ClientSecret = "fsdfdsfsf" // consider them filled correctly
              });
          }
      }
  
  

  And here is my statup.cs

      public partial class Startup
      {
          public void Configuration(IAppBuilder app)
          {
              ConfigureAuth(app);
          }
      }