I would like to use the Azure Web PubSub Service REST call to send a message to a websocket. [https://learn.microsoft.com/en-us/rest/api/webpubsub/dataplane/web-pub-sub/send-to-group][1] POST https://contoso.com/api/hubs/thehub/groups/bd2c9778-7ec6-4ca4-8e8a-89be61ce51f3/:send?api-version=2021-10-01 Authorization: Bearer

The Bearer token is a JWT token with your service AccessKey as the signing key and the full REST API path as the audience. A sample code in JS: const bearerToken = jwt.sign({}, connectionString.accessKey, { audience: request.url, expiresIn: "1h", algorithm: "HS256", });

How to generate token for Azure Web Pub Sub service REST call?

Accepted answer

Liangying Wei 756 Reputation points Microsoft Employee

2022-06-08T01:37:35.993+00:00
The Bearer token is a JWT token with your service AccessKey as the signing key and the full REST API path as the audience.
A sample code in JS:

const bearerToken = jwt.sign({}, connectionString.accessKey, { audience: request.url, expiresIn: "1h", algorithm: "HS256", });
Please sign in to rate this answer.
Manuel Moroni 20 Reputation points

2023-02-26T15:35:21.57+00:00

Is it possible to get the bearer token invoking a REST API? How could that be done (ex. through postman)?

I found the "Generate Client Token" but cannot find the correct header to pass the access key

POST: {endpoint}/api/hubs/{hub}/:generateToken?api-version=2022-11-01

I'm wondering if this sequence could work in order to publish messages:

get the bearer token through rest api {endpoint}/api/hubs/{hub}/:generateToken?api-version=2022-11-01 passing access key

send message through rest api {Endpoint}/api/hubs/{hub}/:send?api-version=2022-11-01 passing Authorization Bearer token retrieved in point 1

and to subscribe:

get the bearer token through rest api {endpoint}/api/hubs/{hub}/:generateToken?api-version=2022-11-01 passing access key

subscribe to websocket wss://{endpoint}.webpubsub.azure.com/client/hubs/{hub}?access_token={token from point 1} passing Authorization Bearer token Thanks

Liangying Wei 756 Reputation points Microsoft Employee

2023-02-27T06:29:57.4633333+00:00

Please note that ":generateToken" is to generate the token for the WebSocket clients (your subscriber) to connect, the token used by your publisher (to invoke REST APIs) is different.. You can enable Azure AD in your service and use the AAD token to invoke rest API to publish messages.

How to enable AAD: https://learn.microsoft.com/en-us/azure/azure-web-pubsub/howto-authorize-from-application

How to get the token with Postman:

For the URI, enter https://login.microsoftonline.com/<TENANT ID>/oauth2/token. Replace <TENANT ID> with the Directory (tenant) ID value in the Overview tab of the application you created earlier.

On the Headers tab, add Content-Type key and application/x-www-form-urlencoded for the value.

Switch to the Body tab, and add the following keys and values.

Select x-www-form-urlencoded.

Add grant_type key, and type client_credentials for the value.

Add client_id key, and paste the value of Application (client) ID in the Overview tab of the application you created earlier.

Add client_secret key, and paste the value of client secret you noted down earlier.

Add resource key, and type https://webpubsub.azure.com for the value.

Select Send to send the request to get the token. You see the token in the access_token field.

Manuel Moroni 20 Reputation points

2023-02-27T08:50:08.2033333+00:00

It worked thanks.

I tried also with send message:

POST https://{endpoint}/api/hubs/{hub}/:send?api-version=2022-11-01

Header Authorization: Bearer {token retrieved with postman}

And it worked

PSchonefeld 0 Reputation points

2023-03-30T04:12:53.7766667+00:00

note: this uses "OAuth 2.0 token endpoint (v1)" not v2.0 from your app registration endpoints list

J Perry 0 Reputation points

2023-10-25T20:46:15.6566667+00:00

Is there a way to do this without access to Entra? We are part of a Entra Group that does not have permissions to create AD Apps/etc...

How can we generate a bearer Token in plain JavaScript?

Liangying Wei 756 Reputation points Microsoft Employee

2023-10-26T03:14:21.9+00:00

Is there a way to do this without access to Entra?

Only if you have the connection string. But please never put the connection string in code for security concerns. Or you can have a backend node.js express app to generate the token for your JavaScript client, as similar to the "negotiate" part of this sample code: https://github.com/Azure/azure-webpubsub/blob/main/samples/javascript/chatapp/nativeapi/server.js#L33-L43
Sign in to comment

How to generate token for Azure Web Pub Sub service REST call?

0 additional answers