The input authorization token can't serve the request. The wrong key is being used or the expected payload is not built as per the protocol.

Aadi 0

Hi all engineers, hoping to get some assistance on above error. Looks like permission issue.

Created a user and assigned the role however, when the user is trying to modify the code, getting an error. If anyone in this channel has any solution, it would be greatly appreciated. thanks

ShaktiSingh-MSFT 14,081 Reputation points Microsoft Employee

2023-09-19T04:42:41.1766667+00:00

Hi
Aadi •,

Could you please share more details on the Azure Cosmos DB API, configuration, how and where keys are stored?

Thanks

4 answers

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more
Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more
Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more
ShaktiSingh-MSFT 14,081 Reputation points Microsoft Employee

2023-09-18T09:46:45.3333333+00:00

Hi
Aadi •,

Welcome to Microsoft Q&A forum.

As I understand, the input authorization token can't serve the request. The wrong key is being used or the expected payload is not built as per the protocol error.

Could you please share more information about the API of the Azure Cosmos DB, how keys are created and id stored in Key Vault?

Code sample would help to understand the issue.

Also, if this code has "resourceLink", try to change it to "resourceId" and see if this works.

Please share all important information to enable us to assist you.

Thanks
Please sign in to rate this answer.
Bhavya Sri Pedapudi 0 Reputation points Microsoft Employee

2024-05-16T12:03:42.3766667+00:00

Hello, I am too facing this issue. We are using Microsoft.Azure.Documents.Client, Version=2.18.0.0 sdk. We are trying to move away from the Key based auth to MSI based one. As part of this, trying to initialize the DocumentClient object using the authToken got from DefaultAzureCredential (MSI). Post this when i try to do a ReadDocumentAsync() method, it is failing. fyi, we did not change this querying part. it is the same as before when we were using Keys to auth. can anyone please help resolve this? please check the code.

ShaktiSingh-MSFT 14,081 Reputation points Microsoft Employee

2024-05-20T05:38:57.73+00:00

Hi Bhavya Sri Pedapudi,

All REST operations, whether you're using a master key token or resource token, must include the authorization header with the authorization string in order to interact with a resource.

Refer:

https://learn.microsoft.com/en-us/rest/api/cosmos-db/access-control-on-cosmosdb-resources

Please raise a fresh question over Q&A to get your query addressed.

Thanks.
Sign in to comment

Share via

The input authorization token can't serve the request. The wrong key is being used or the expected payload is not built as per the protocol.

4 answers