Questions tagged [oauth]

OAuth is an open standard for authorization. OAuth provides a method for clients to access server resources on behalf of a resource owner (such as a different client or an end-user). It also provides a process for end-users to authorize third-party access to their server resources without sharing their credentials (typically, a username and password pair), using user-agent redirections.

Filter by
Sorted by
Tagged with
10
votes
2answers
4k views

How do I renew a Refresh token?

Let's say I have a provider-hosted app that's installed on a client's Office 365 site. A user clicks the app and they're redirected to our site. The redirects gives us (among other things) a Refresh ...
9
votes
2answers
6k views

Oauth Authentication for SharePoint REST API

Based on my research and this Video, I was under the impression that switching between the Graph API and the SharePoint REST API should be pretty straight forward. After obtaining an OAuth2 token, I ...
8
votes
1answer
2k views

Can you create a multitenant provider hosted app without using the office store?

Stackexchange says this is a subjective question but I don't think it is. I am just trying to discover feasibility here. After a lot of reading online, I was able to successfully convert an app that ...
8
votes
3answers
6k views

OAuth Authentication and Authorization to REST API from a Node.js Javascript program

I have a Javascript that retrieves the UserCollection from a Site and does some other things from the REST API. This script runs in my own Node.js server. Currently, I use HTTP Basic Authentication ...
8
votes
2answers
502 views

Access AAD protected Web API with SharePoint Online user token

I have a Web API protected by using Bearer tokens form Azure AD (https://azure.microsoft.com/en-us/documentation/articles/active-directory-devquickstarts-webapi-dotnet/). Now, I would like to call ...
6
votes
1answer
3k views

Login from High-Trusted SharePoint Provider Hosted App using FBA

I created a sharepoint provider hosted app (high-trusted app) that uses an asp .net membership provider customized to use an external service. I configured the sharepoint web application to use the ...
5
votes
2answers
7k views

From where to use TokenHelper class for client context in SharePoint Online?

I have been reading several articles to get SharePoint Online client context with the generated access token. All of them use TokenHelper class to get the client context as shown below: ClientContext ...
5
votes
3answers
12k views

How to use SharePoint RESTful web services with Node.js?

I'm working on a Node.js app and I'd like to use some basic SharePoint services inside the app. I've already done this using java and SOAP web services (copy, list, search) And now I'd like to do the ...
4
votes
0answers
262 views

Accessing Graph API from a SharePoint web part without an additional authentication

I am creating a webpart for SharePoint Online which accesse the user's calendar through the Microsoft Graph API. In order to get the access_token, my webpart needs to open a new browser window where ...
3
votes
1answer
317 views

How safe is SharePoint Online (Office 365) login?

I have some discussions with my work mates about how safe is SharePoint Online login. I think it is just as DropBox, FaceBook or any other application with a form. I know that Office 365 uses OAuth2 ...
3
votes
1answer
145 views

How to start the Sharepoint app development [closed]

How to start the SharePoint App development ? What is the SharePoint Hosted App Model ? What is the open authorization 2.0 OAuth 2.0 ? i am new to office 365 and develop apps for share point 2013, ...
3
votes
3answers
215 views

Can I use OAuth without an app?

We have a service we host ourselves (on Azure) that accesses Office 365 via CSOM. We'd like to access a user's site on their behalf without previously installing an app on their site collection. Is ...
3
votes
1answer
3k views

How to allow authenticated cross-domain calls in an SP 2016 on-prem scenario?

In an on-premises scenario I need to call SharePoint 2016 REST services (via XHR) from JavaScript. The calls will originate from a host different from the SharePoint host. To allow these calls I need ...
3
votes
1answer
1k views

SharePoint Online Provider Hosted App Context Token Is NULL On Postback

I have a provider hosted app in SharePoint Online. The problem I have is sometimes on postback the TokenHelper Class method GetContextTokenFromRequest is returning Context Token as NULL ...
2
votes
1answer
4k views

Access Sharepoint from console using token

I want to access a Sharepoint 2013 / office365 - site from a console application using OAuth-token I saved earlier using a provider hosted app. I already can connect using credentials: using (...
2
votes
1answer
5k views

Using SharePoint 2013 TokenHelper class when there is no HttpContext.Current

SharePoint 2013 Apps in Visual Studio have a TokenHelper class that simplifies using OAuth to connect to a SharePoint 2013 ClientContext. I am using this class to remotely connect to a SharePoint ...
2
votes
1answer
741 views

Switching from dynamic Client ID to constant Client ID

I'm working on a provider-hosted low-trust Share Point App. I used to develop it with the Debugging Function of Visual Studio which created a new Client ID and Client Secret every time the debugging ...
2
votes
2answers
119 views

SharePoint Online OAuth with Azure AD Users

I used this SharePoint OAuth Article from Microsoft to get the authorization code grant flow working with a SharePoint site. The idea is to get the access token dynamically from an external app (and ...
2
votes
1answer
432 views

401 Unauthorized after OAuth 2 authentication

I am developing a native app (WinInet/C++) and after completing OAuth2 as described here and getting auth token, try to send any request to my SharePoint but get 401. The site is SharePoint online (...
2
votes
0answers
376 views

Signing in Guest (External) users in Multi-tenant Azure AD registered App

We have an app to consume SharePoint data that authenticates users using OAuth2 and App Registration in Azure AD. The app is multi-tenant as it should be available for multiple customers. Everything ...
2
votes
1answer
758 views

How can I retrieve a SharePoint online OAuth access token for unit tests?

I'm using the SharePoint 2013 Rest API in my web-application and I want to write some unit tests. GitHub has the notion of personal access token (Creating a personal access token for the commande ...
2
votes
0answers
148 views

How to force deleted files to be placed in 1st stage recycle bin as admin?

I am working on an app where the user authenticates using OAuth. One of the features is that the user should be able to recycle files and restore them. Recycling and restoring is done using the ...
2
votes
0answers
240 views

How do we use OpenID with AzureAD to authenticate to SharePoint Office 365 API

I need to have a user context available to get a list of SP lists based on permissions. I've wired up Startup.Auth.cs with UseOpenIdConnectAuthentication. I've granted the SharePoint permissions in ...
2
votes
0answers
544 views

MSF 2013 - Non-OAuth request. IsAuthenticated=True, UserIdentityName=, ClaimsCount=0

I'm developing some custom WebParts, including WCF Services to be hosted within the ISAPI directory of Sharepoint (Foundation 2013) I'm also referencing some files from the SiteAssets (*js frameworks,...
2
votes
1answer
2k views

Authenticate Web UI using OAuth2 Access Token from ADFS

In an Ionic mobile app, we need to access the SharePoint API and to show a SharePoint Web UI in an Ionic WebView (essentially a browser inside the app). We're using OnPrem ADFS on Windows Server 2012 ...
2
votes
0answers
507 views

Is the OAuth implicit grant type supported for provider-hosted add-ins?

The provider of my provider-hosted add-in needs to ask for SharePoint (Online) permissions on the fly. OAuth can be used to achieve this, as documented here in MSDN. The authorization is low-trust ...
2
votes
0answers
1k views

How to connect to SharePoint ( with Node.js) using OAuth with user context?

I created a Node.js App that connects to SharePoint(OnPremise and O365) and does all sorts of things. The app uses sp-request and node-sp-auth APIs for Basic Authentication (username, password), and ...
2
votes
0answers
479 views

Implementing Single Sign On in SharePoint 2013 On-Premise Multi-Tenant environment using OAuth with other websites or systems

Can anyone please provide a detailed walk through with steps for implementing Single Sign On in SharePoint 2013 On-Premise Multi-Tenant environment using OAuth with other websites or systems?
2
votes
0answers
200 views

Experiences and authentication experiences adding a struts2 web application as an App (HTML) to SharePoint 2013

from my question title, you can tell I have no experience developing web applications for SharePoint applications Per requirements, I need to develop Java Web Applications (run on its own Tomcat ...
2
votes
0answers
2k views

Token Request Failed: Remote Server returned error (400) while fetching the token

My Requirement is to retrieve a document from SharePoint online using a .NET console application. I followed the steps in this link . But I get a failure Token request failed. {"The remote ...
1
vote
1answer
2k views

AppSecret key lifetime and expiration

I see when I use Seller Dashboard max token lifetime is 3 year. Does anybody know it how long it be valid if I use AppRegnew.aspx page?
1
vote
1answer
64 views

How to check whether SharePoint web server to app server communication is going over oauth http or https secure channel?

We have SharePoint 2013 on premises farm and have SSl enabled for web application. Is the server to server trust configured with OAuth framework with default https as my web application is running ...
1
vote
0answers
370 views

Get JWT Tokens in SharePoint Online

There is a function in Outlook API called getCallbackTokenAsync([options], callback); Office.context.mailbox.getCallbackTokenAsync How can I get such function in SharePoint Online? Is there an ...
1
vote
0answers
1k views

Get bearer token for SharePoint server 2013

I'm developing a Windows 10 application for my company that runs on the client machine. The app needs to make REST requests for our SP Server to get some information but as I have seen, I need an ...
1
vote
0answers
335 views

Accessing Project Online Data Read/Write through CSOM / REST

Hello I am trying to access data (for example tasks and the timesheet) saved in a Sharepoint hosted Project Online enviroment. I would like to write a MVC app which is able to access the data in ...
1
vote
0answers
349 views

SharePoint Online: Access denied while getting OAuth code

I am trying to get OAuth code to access sites and lists from SharePoint Online. Below are the steps that I have performed: Register application at URL https://adventurer.sharepoint.com/_layouts/15/...
1
vote
0answers
691 views

OAuth+OpenID+REST JWT Token and Audience working with subdomains?

Ok, so I have used OAuth and gotten my JWT token and I’m having a lot of success using the REST API to do what I want to do (upload/download files and folders) however, when I get a list of sites I ...
1
vote
1answer
473 views

SharePoint Low trust Provider Hosted Add-in access denied to host web, the remote server returned an error: (403) Forbidden

Brief of what I am trying to achieve: Would like to create root folder properties for a list thats in SharePoint online host web from a remote web service hosted in azure web app. Have the hybrid ...
1
vote
1answer
1k views

SharePoint Online 2013 Workflow calling external web service with bearer token

I am trying to call a Dynamics CRM Online web service from a SharePoint 2013 workflow in SharePoint online with a HttpSend activity. I am unable to get the call to authorize. The workflow does not ...
1
vote
0answers
596 views

Requesting access token gives Microsoft.IdentityModel.SecurityTokenService.RequestFailedException error

I'm trying to get a basic provider-hosted app up and running on Azure Websites. The app seems to work fine when testing locally with IIS Express, but when I deploy to Azure Websites and run the same ...
1
vote
0answers
989 views

“The Azure Access Control service is unavailable” on Azure Sharepoint Farm via Oauth

we are trying to evaluate integrating Sharepoint 2013 as a Data Source into our app, i.e. create a low trust app that receives a token from Sharepoint and makes further inquiries with that token. The ...
1
vote
1answer
359 views

Office 365 Authorization without login

I am developing a Mobile app which sends data to SharePoint list (SharePoint Online, Office 365). The users of the app should be able to save data in the list silently, without logging. Is this ...
1
vote
0answers
207 views

ask for access permissions on the fly in SharePoint 2013 using php

I'm trying to get accesstoken from the authorization code as described in here - but using PHP app. http://msdn.microsoft.com/en-us/library/office/jj687470(v=office.15).aspx I was able to do this ...
1
vote
1answer
236 views

Sharepoint Oauth URL returns 404

One of the steps in doing the sharepoint OAuth flow redirects me to https://accounts.accesscontrol.windows.net/metadata/json/1?realm=https://<mysite>.sharepoint.com I have 2 queries regarding ...
1
vote
0answers
213 views

OAuth Authentication & Azure

I'm new to SharePoint development and using Office 365 SharePoint 2013. We need to replace our AD cloud based authentication servers with OAuth authentication. Am I correct in thinking that our SP ...
0
votes
1answer
148 views

Mix CSOM and JSOM? Any disadvantages?

I need to write an Office365-App. I want to use a provider-hosted MVC-Application for this. As I want to use some kind of "API" on some pages, that returns a JSON that then is used inside JS to ...
0
votes
1answer
543 views

Unable to authorize SharePoint 2013 app unless Team Site Owner

I've built a SharePoint 2013 app that requests permissions on the fly via OAuth. The scope being requested is Web.Write. I've been able to authorize this app as a SharePoint user part of the Team Site ...
0
votes
1answer
1k views

Remote authentication using REST

I am trying to access SharePoint online using REST API's remotely. Office 365 Smart links are enabled for the site. As per this blog I don't receive wsse\\:BinarySecurityToken in the response. My code ...
0
votes
1answer
256 views

OData Authentication without site URL

We are currently in the process of developing a range of SharePoint applications which will have mobile apps alongside them which connect to the SharePoint site. We are having a few issues getting ...
0
votes
0answers
37 views

Invalid token or signature - when starting a workflow

We configured the workflow service in our SharePoint 2019 farm using HTTP. When the workflow starts it failed with "HTTP Unauthorized" error coming from WFE server. The WFE server presents ...