I have deployed a simple Web API project with weatherforecast controller in it. There is no Authorization code in the API. Deployed the API to Azure Web App. Tested the endpoint https://xxxx.azurewebsites.net/weatherforecast and it worked fine. Created a spfx webpart and connected to the API - worked fine Enabled Authentication in App Service Added API permission - user_impersonation, User.Read Granted Admin Consent Updated spfx to use AadHttpClient Added webApi permission request in package-solution Deployed sppkg Approved in SharePoint Admin center -> API permission When the webpart is added to a page - it tries to connect to the API and it results in 403 error. I can see the Bearer token in the request and use JWT decoder - it all looks good Checked API logs and found 403.76 error code. Any idea on how to resolve this?

Connecting to Azure Web App API from SpFx is throwing 403.76 error

Amal Hashim 0

I have deployed a simple Web API project with weatherforecast controller in it.

There is no Authorization code in the API.
Deployed the API to Azure Web App. Tested the endpoint https://xxxx.azurewebsites.net/weatherforecast and it worked fine.
Created a spfx webpart and connected to the API - worked fine
Enabled Authentication in App Service
- Added API permission - user_impersonation, User.Read
- Granted Admin Consent
Updated spfx to use AadHttpClient
- Added webApi permission request in package-solution
Deployed sppkg
Approved in SharePoint Admin center -> API permission

When the webpart is added to a page - it tries to connect to the API and it results in 403 error.

I can see the Bearer token in the request and use JWT decoder - it all looks good

Checked API logs and found 403.76 error code.

Any idea on how to resolve this?

ajkuma 22,766 Reputation points Microsoft Employee

2024-05-09T13:11:09.89+00:00

Based on my understanding of your issue description, I see that you’re encountering a 403.76 error when trying to connect to an Azure Web App API from a SharePoint Framework (SPFx) web part. This error typically indicates that the client certificate is not trusted by the server, or the client did not provide a certificate.

Are you referring to any Azure docs for the steps?
Connect to Azure AD-secured APIs in SharePoint Framework solutions*
*
Just to isolate, if you haven't tried already so, you may try these:

-Try removing the access restrictions from Networking page of your web app.
-Try giving the access to all by adding 0.0.0.0/0. Later you can add restrictions based on your requirements. Checkout SO discussion for your reference.

As discussed in this discussion thread on similar issue, you may consider to app setting and then test : WEBSITE_AUTH_AAD_BYPASS_SINGLE_TENANCY_CHECK = true

Kindly let us know, I'll follow-up with you further.
Amal Hashim 0 Reputation points

2024-05-10T10:08:10.83+00:00

Thanks ajkuma for your time.

I tried to add the app settings and its not working.

I followed the link you shared for setting up and got into 403 error.

If I disable the authentication, it works fine. So I dont think there is any network related issues that is causing this problem.

I am not sure what certificate you are talking about. Can you please elaborate? Its a SharePoint Online site.
ajkuma 22,766 Reputation points Microsoft Employee

2024-05-10T11:45:06.35+00:00

Thanks for the follow-up and update.
Could you please share any Azure doc that you are referring for the steps to configure SharePoint Online site with WebApp ? I'm also reaching out privately to fetch details about your WebApp.
Amal Hashim 0 Reputation points

2024-05-13T04:42:55.0033333+00:00

Hi, I have followed below article

https://learn.microsoft.com/en-us/sharepoint/dev/spfx/use-aadhttpclient

I have shared requested details in private message.

Thanks,

Amal
ajkuma 22,766 Reputation points Microsoft Employee

2024-05-13T11:52:26.4333333+00:00

Amal, thanks for sharing the requested details. I' have followed-up with you further privately.

Share via

Connecting to Azure Web App API from SpFx is throwing 403.76 error