Python Sharepoint library Office365-REST-Python-Client ERROR: 401: Unauthorized for url: https://mydomain.sharepoint.com/sites/sample/_api/Web

Question

I am trying to use the App-only flow for Share point.

First, I have created a new app client-id and secret with this URL https://mydomain.sharepoint.com/sites/sample/_layouts/15/appregnew.aspx.

Then I went to the URL https://mydomain.sharepoint.com/sites/sample/_layouts/15/appinv.aspx to give permissions to this app with the following xml.

<AppPermissionRequests AllowAppOnlyPolicy="true"> <AppPermissionRequest Scope="http://sharepoint/content/sitecollection" Right="FullControl"/> <AppPermissionRequest Scope="http://sharepoint/content/sitecollection/web" Right="FullControl"/> </AppPermissionRequests>

and clicked on trust it.

The code that I am using :

from office365.runtime.auth.authentication_context import AuthenticationContext
from office365.sharepoint.client_context import ClientContext

site_url = 'https://mydomain.sharepoint.com/sites/sample/'
app_principal = {
  'client_id': '.....-..',
  'client_secret': '......=',
}

context_auth = AuthenticationContext(url=site_url)
context_auth.acquire_token_for_app(client_id=app_principal['client_id'], 
client_secret=app_principal['client_secret'])

ctx = ClientContext(site_url, context_auth)
web=ctx.web
ctx.load(web)
ctx.execute_query()
if len(result) > 0:
    print("Folder has been found: {0}".format(result[0].properties["Name"]))

But it throws the following error : Traceback (most recent call last): File "client.py", line 16, in <module> ctx.execute_query() File "C:\Users\AppData\Local\Programs\Python\Python37\lib\site-packages\office365\runtime\client_runtime_context.py", line 140, in execute_query self.pending_request().execute_query() File "C:\Users\AppData\Local\Programs\Python\Python37\lib\site-packages\office365\runtime\client_request.py", line 79, in execute_query raise ClientRequestException(*e.args, response=e.response) office365.runtime.client_request_exception.ClientRequestException: (None, None, '401 Client Error: Unauthorized for url: https://mydomain.sharepoint.com/sites/sample/_api/Web')

Need help.

@Erfan I instead chose the other way of implementation which is, using certificates and it worked but it's a different approach altogether. Somehow client_id and secret was not working even after following the documented steps. — Vishal Tyagi
– Vishal Tyagi, Commented Dec 8, 2020 at 4:59

Amos · Accepted Answer · 2020-09-24 09:22:16Z

2

I follow your steps,but I could not reproduce your issue.

If your office365 tenant is created recently,you could try to run below command.

Set-SPOTenant -DisableCustomAppAuthentication $false

Tip:You need to update the SharePoint Online managed shell to the latest version.

Updated:

edited Sep 24, 2020 at 9:22

answered Sep 24, 2020 at 7:13

Amos

2,0911 gold badge8 silver badges9 bronze badges

Sign up to request clarification or add additional context in comments.

10 Comments

Vishal Tyagi Over a year ago

Hi, I managed to get the authentication working by taking a new approach instead of the client credentials flow. There is a certificate flow and is also supported by the python lib. Was it maybe because I had sharepoint online instead of the on-premise setup.

Vishal Tyagi Over a year ago

Do you have an on-prem office 365 setup?

Amos Over a year ago

No,I do not have one.

Vishal Tyagi Over a year ago

I followed this link learn.microsoft.com/en-us/sharepoint/dev/solution-guidance/…

Vishal Tyagi Over a year ago

No clue why the SharePoint app-only principal did not work but I can confirm that the Azure AD app-only works fine with the lib's ClientContext.connect_with_certificate

|

Collectives™ on Stack Overflow

Python Sharepoint library Office365-REST-Python-Client ERROR: 401: Unauthorized for url: https://mydomain.sharepoint.com/sites/sample/_api/Web

1 Answer 1

10 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

10 Comments

Your Answer

Sign up or log in

Post as a guest

Related