Creating upload session responds with 401. Application has 'Sites.ReadWrite.All' permission.

Question

Creating upload session responds with 401. Application has 'Sites.ReadWrite.All' permission.

Kieran 1

When I try create an upload session it fails with 401 unauthorised despite having the 'Sites.ReadWrite.All' permission. Reading the contents of the drive item does work.

const response = await axios.post(  
            `https://graph.microsoft.com/v1.0/users/${userId}/drive/items/${itemId}/createUploadSession`,  
            {  
                headers: {  
                    Authorization: `bearer ${token}`,  
                },  
            },  
        )

CarlZhao-MSFT 23,686 Reputation points

2022-11-14T07:35:46.6+00:00

Hi @Kieran
Use https://jwt.ms/ to parse your access token and share screenshots.
Gopinath Chennamadhavuni 2,401 Reputation points

2022-11-14T07:58:37.617+00:00

Hi @Kieran , As per the documentation I am able to create upload session using app permission under user's drive. 401 Unauthorized error: Is your token valid. Make sure that your application is presenting a valid access token to Microsoft Graph as part of the request. This error often means that the access token may be missing in the HTTP authenticate request header or that the token is invalid or has expired.
You can always leverage https://jwt.ms to check claims on your token. Use this and check if you have the necessary permissions to call an API endpoint.
Also please check If a location-based policy is enabled at yout tenant. Please refer this for more details.
Kieran 1 Reputation point

2022-11-14T07:59:07.913+00:00

Thanks for the reply, here is the screenshot
CarlZhao-MSFT 23,686 Reputation points

2022-11-14T08:24:11.057+00:00

Hi @Kieran
Can your script get uploadUrl? https://learn.microsoft.com/en-us/graph/api/driveitem-createuploadsession?view=graph-rest-1.0#response
CarlZhao-MSFT 23,686 Reputation points

2022-11-14T08:29:22.3+00:00

Hi @Kieran
Your token looks fine, and I suspect your error occurred at the step from uploading the file to the upload session. Note that do not provide any tokens for uploadUrl.
Kieran 1 Reputation point

2022-11-14T08:45:53.04+00:00

Not it cant, that's the part that is returning 401. I have tried in the graph explorer and it does return an upload link but I am unable to do that outside the graph explorer.

CarlZhao-MSFT 23,686 Reputation points

2022-11-14T07:35:46.6+00:00

Hi @Kieran
Use https://jwt.ms/ to parse your access token and share screenshots.
Gopinath Chennamadhavuni 2,401 Reputation points

2022-11-14T07:58:37.617+00:00

Hi @Kieran , As per the documentation I am able to create upload session using app permission under user's drive. 401 Unauthorized error: Is your token valid. Make sure that your application is presenting a valid access token to Microsoft Graph as part of the request. This error often means that the access token may be missing in the HTTP authenticate request header or that the token is invalid or has expired.
You can always leverage https://jwt.ms to check claims on your token. Use this and check if you have the necessary permissions to call an API endpoint.
Also please check If a location-based policy is enabled at yout tenant. Please refer this for more details.
Kieran 1 Reputation point

2022-11-14T07:59:07.913+00:00

Thanks for the reply, here is the screenshot
CarlZhao-MSFT 23,686 Reputation points

2022-11-14T08:24:11.057+00:00

Hi @Kieran
Can your script get uploadUrl? https://learn.microsoft.com/en-us/graph/api/driveitem-createuploadsession?view=graph-rest-1.0#response
CarlZhao-MSFT 23,686 Reputation points

2022-11-14T08:29:22.3+00:00

Hi @Kieran
Your token looks fine, and I suspect your error occurred at the step from uploading the file to the upload session. Note that do not provide any tokens for uploadUrl.
Kieran 1 Reputation point

2022-11-14T08:45:53.04+00:00

Not it cant, that's the part that is returning 401. I have tried in the graph explorer and it does return an upload link but I am unable to do that outside the graph explorer.

Answer 1

Kieran 1

Hey, thanks everyone who replied. After further testing this issue only occurs when using axios to make the request.

Creating upload session responds with 401. Application has 'Sites.ReadWrite.All' permission.

1 answer

Activity