I have a Microsoft Teams Bot application called Beep. The app has been approved and is in the Teams App store.
Prior to the approval, we were sideloading the app and everything was working fine.
After the approval, we removed the sideloaded app and used the one from the store in one Tenant it worked fine as normal.
But in the other tenant it have this error shown below:
{
"statusCode": 403,
"headers": {
"cache-control": "no-cache, no-store, must-revalidate",
"content-length": "82",
"content-type": "application/json; charset=utf-8",
"contextid": "tcid=0,server=msgapi-production-weu-azsc3-3-23,cv=ZAWkamQzUEOcNgegL4EseA.0",
"pragma": "no-cache"
},
"errorMessage": "<BotDisabledByAdmin>The tenant admin disabled this bot",
"errorCode": 0,
"request": {}
}
The app is added under Third-party under Global (Org-wide default).
The bot is enabled under the policy as well. Can you please guide me on what I am doing wrong or what steps should I need to follow?
Make sure 3. party apps are allowed in that tenant.
See this page for info
Related
I'm trying to develop a mobile application where users can register by entering only their phone number. The client application is a native iOS Application which communicates with a Spring Boot backend via REST.
I already implemented a Spring Boot backend as ressource server and a keycloak instance as authorization server.
Registering users by using their username/password combination already works perfectly fine but i can't figure out how to create a user with only the phone number as username and password both are required.
I have already found out how to add a phone number as attribute to the user. So my minimal create user request body becomes this:
{
"username": "Test",
"credentials": [{
"type": "password",
"value": "testpwd"
}],
"enabled" : true,
"attributes": {
"phoneNumber": "123456"
}
}
The phone number also appears in the access token because I already added it in the client scope.
The decoded access token looks like this:
...
"scope": "phone",
"phone_number": "123456"
I am doing a simple GET request using this instagram API endpoint: https://api.instagram.com/v1/users/{USER ID}/media/recent?access_token={ACCESS TOKEN}
I get the access token via OAuth2Authenticator from Xamarin.Auth plugin.
I just notice today that the get recent media request is returning this :
{
"pagination": {},
"data": [],
"meta": {
"code": 200
}
PS: I am testing with my admin instagram account, and also with approved sandbox users.
Scope : basic
The answer is really basic.
If you are in the sandbox mode then you will need to switch your account privacy to public in Instagram. Private accounts are not working properly for me.
i wanted to test some API Requests from Proximity Beacon API. So i followed the steps from this site and put a test redirect url (https://developers.google.com/oauthplayground) into the OAuth-2.0-Client-ID. When i try to make an request from the playground i get following output:
{
"error": {
"status": "PERMISSION_DENIED",
"message": "Google Proximity Beacon API has not been used in project google.com:oauth-2-playground before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/proximitybeacon.googleapis.com/overview?project=google.com:oauth-2-playground then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry.",
"code": 403,
"details": [
{
"#type": "type.googleapis.com/google.rpc.Help",
"links": [
{
"url": "https://console.developers.google.com/apis/api/proximitybeacon.googleapis.com/overview?project=google.com:oauth-2-playground",
"description": "Google developers console API activation"
}
]
}
]
}
}
obviously it is using the wrong project, but i only got to a step where i was able to pick my account but not my project. i checked everything twice and my only guess is that i cannot use this redirect_url.
So my question: Why is it trying to use the project google.com:oauth-2-playground instead of mine? And how can i change this?
The Proximity Beacon API was not enabled on the default credentials that the OAuth 2.0 Playground uses. I've just enabled that API and now this should work.
Alternatively you can setup the OAuth 2.0 Playground to use your own app's OAuth Credentials (Client ID and Client Secret) in the configuration menu of the playground.
I am using the Wordpress Rest API on my WinJS Universalapplication and would like to somehow login my users before I let them browse products which I also get from the API.
I have tried something like this
var settings = {
"async": true,
"crossDomain": true,
"url": "http://example.com/wp-json/users/me",
"method": "GET",
"headers": {
"authorization": "Basic dXNlcm5hbWU6cGFzc3dvcmQ==",
"cache-control": "no-cache"
}
}
$.ajax(settings).done(function(response) {
console.log(response);
});
But I get
DENIED - The requested resource requires user authentication. (XHR): GET - http://example.com/wp-json/users/me
I have also tried it using Postman and got this back
[{"code":"json_not_logged_in","message":"You are not currently logged in."}]
I am not really sure what I am doing wrong since I am trying to log in with a username/password combination which is in the Users list in Wordpress.
UPDATE:
After installing a basic authentication plugin I am now able to get the it working but now when I enter a wrong username or password Windows 10 jumps in and opens its own login form instead of letting me handle it.
I'll have to figure out now how to supress this behaviour
Glad you figured it out. I'd recommend you to use Application Passwords plugin instead of the Basic Authentication one since the latter is only for testing/dev purposes and not so secure for production!
I'm trying to use LicenseNotification API from the test page here for a test app I have built, published and already installed in one of our test domains.
App status on the CWS is published (published, GAM: published) and the app works fine.
I am logged in using the app project owner and I enabled OAuth 2.0 Authorization switch. Set the applicationId (which one is right, the one from Developers Console Marketplace SDK configuration or the one from CWS aka element id? I tried both..), clicked on Execute and I get the following response
{
"error": {
"errors": [
{
"domain": "global",
"reason": "forbidden",
"message": "Not authorized to access the application ID"
}
],
"code": 403,
"message": "Not authorized to access the application ID"
}
}
What am I doing wrong?
EDIT: My app is published but visibility is set to "private" for my test domain only.