An error occurred when using the create subscription api 'Resource' is invalid.

beem beem 0

Use this account 'beem1@beem2023.onmicrosoft.com' Create an event subscription for this account 'beem2@beem2023.onmicrosoft.com'

request params : {'changeType':'created,updated,deleted','notificationUrl':'https://8b15-39-109-68-195.ngrok-free.app/outlook/callback/notifier','resource':'/users/d31f87b5-5713-4f4e-b494-8fe72268af86/events','expirationDateTime':'2023-09-22T12:14:47.084910+08:00','clientState':'33abeab9-08d3-483b-892b-0ddcd0ce569f'} 成功，返回结果: Response{protocol=http/1.1, code=400, message=Bad Request, url=https://graph.microsoft.com/v1.0/subscriptions}

response msg:

{protocol=http/1.1, code=400, message=Bad Request, url=https://graph.microsoft.com/v1.0/subscriptions}.subResBody:{'error':{'code':'ExtensionError','message':'Operation: Create; Exception: [Status Code: BadRequest; Reason: The value 'https://outlook.office365.com/api/v2.0/Users('d31f87b5-5713-4f4e-b494-8fe72268af86%40aec8009e-b17b-4432-b094-f298ef7d96c4')/Events' of parameter 'Resource' is invalid.]','innerError':{'date':'2023-09-21T04:14:48','request-id':'8b7be429-4046-4cf7-8400-8ea567a63105','client-request-id':'8b7be429-4046-4cf7-8400-8ea567a63105'}}}

beem beem 0 Reputation points

2023-09-21T08:53:15.55+00:00

Please help to solve this problem, we can't find any solution, thank you
beem beem 0 Reputation points

2023-09-21T09:02:52.8+00:00

Hello, I am using the API to create subscription events for users, but found that the request cannot be successful and code 400 is returned. Please help to troubleshoot the problem. We cannot find a solution.
CarlZhao-MSFT 41,286 Reputation points

2023-09-21T09:48:47.4133333+00:00

Hi @beem beem

You cannot use one account to create subscriptions for another account, you can only create subscriptions for other users using unattended application permissions.
CarlZhao-MSFT 41,286 Reputation points

2023-09-26T01:54:59.9433333+00:00

Hi @beem beem

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread.

Thanks,

Carl

1 answer

CarlZhao-MSFT 41,286 Reputation points

2023-09-21T09:44:04.6933333+00:00
Hi @beem beem

Creating subscriptions for Outlook REST API resources using the graph API is not supported. If you are trying to subscribe to events in another user's mailbox, please refer to the following example:

POST https://graph.microsoft.com/v1.0/subscriptions Content-type: application/json { "changeType": "created,updated,deleted", "notificationUrl": "https://webhook.azurewebsites.net/api/send/myNotifyClient", "resource": "users/{id}/events", "expirationDateTime":"2016-11-20T18:23:45.9356913Z", "clientState": "secretClientValue", "latestSupportedTlsVersion": "v1_2" }

By the way, if you are trying to subscribe to events for multiple users, then try requesting the /subscriptions API endpoint separately for different users.

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.
Please sign in to rate this answer.
beem beem 0 Reputation points

2023-09-21T10:00:50.71+00:00

Hello, I am very happy to receive your reply, but we are currently using the example you provided to subscribe to other users' event messages respectively, but the response message given to us is always 400, and the subscription has been unsuccessful. Please help again. Let’s take a look at what’s causing it? Thank you

request Json params:

{"changeType":"created,updated,deleted","notificationUrl":"https://8b15-39-109-68-195.ngrok-free.app/outlook/callback/notifier","resource":"users/d31f87b5-5713-4f4e-b494-8fe72268af86/events","expirationDateTime":"2023-09-22T17:54:48.112975+08:00","clientState":"6ce723f1-de4b-49d0-8a22-7071d99c982f","latestSupportedTlsVersion":"v1_2"}

response msg：

{"error":{"code":"ExtensionError","message":"Operation: Create; Exception: [Status Code: BadRequest; Reason: The value 'https://outlook.office365.com/api/v2.0/Users('d31f87b5-5713-4f4e-b494-8fe72268af86%40aec8009e-b17b-4432-b094-f298ef7d96c4')/Events' of parameter 'Resource' is invalid.]","innerError":{"date":"2023-09-21T09:54:49","request-id":"362e996f-8d02-4188-bd13-6714edefaca8","client-request-id":"362e996f-8d02-4188-bd13-6714edefaca8"}}}

We also looked at the API for creating subscriptions, and used the users/{id}/events event resource, and replaced {id} with the user ID we want to subscribe to. Is it because of permission issues that we have been unable to subscribe successfully? ?

CarlZhao-MSFT 41,286 Reputation points

2023-09-21T10:12:43.0666667+00:00

It looks like the base URL of your resource was changed to Outlook API. Please use jwt.ms to decode your access token and share the screenshot.

beem beem 0 Reputation points

2023-09-21T10:16:19.5933333+00:00

Hello, this is a screenshot of my JWT, please help me troubleshoot, thank you

beem beem 0 Reputation points

2023-09-21T10:16:30.7566667+00:00

33333333333

beem beem 0 Reputation points

2023-09-21T10:24:53.8933333+00:00

And we try to find that only subscribing to ourselves can be successful, but subscribing to others will return this error.And we tried to find that only subscribing to ourselves can be successful, but subscribing to others will return this error. Please help to troubleshoot what is the cause? { 'error': { 'code': 'ExtensionError', 'message': 'Operation: Create; Exception: [Status Code: BadRequest; Reason: The value 'https://outlook.office365.com/api/v2.0/Users('beem2%40beem2023.onmicrosoft.com')/Events' of parameter 'Resource' is invalid.]', 'innerError': { 'date': '2023-09-21T10:23:51', 'request-id': '472330d7-4ca0-4900-8c00-e4017a9560a4', 'client-request-id': '472330d7-4ca0-4900-8c00-e4017a9560a4' } } }

CarlZhao-MSFT 41,286 Reputation points

2023-09-21T10:28:23.8466667+00:00

Your token looks fine, let me try if I can reproduce your issue in my environment.

beem beem 0 Reputation points

2023-09-21T10:30:49.44+00:00

Okay, thank you very much, and you can pay attention to this problem: I can subscribe to myself, but when I subscribe to others, the above error will occur. Is it related to permission configuration?

CarlZhao-MSFT 41,286 Reputation points

2023-09-21T10:38:13.3033333+00:00

Hi @beem beem

Thank you for this important information!

You cannot use delegated permissions to create subscriptions for other users. Please grant your app the Calendars.Read application permission, and then use the unattended client credentials flow to obtain an access token.

beem beem 0 Reputation points

2023-09-21T10:49:55.94+00:00

OK I'll give it a try

beem beem 0 Reputation points

2023-09-21T10:53:02.89+00:00

Wow you are awesome, I just tried it and it worked, thank you so much for your reply

beem beem 0 Reputation points

2023-09-21T10:57:32.3666667+00:00

Hello, but our requirement is to use one account to simulate creating subscriptions for other accounts. It seems that this cannot be achieved using the application token. Is there any other way for this?

beem beem 0 Reputation points

2023-09-21T11:04:55.1433333+00:00

We cannot use this method client credentials flow

beem beem 0 Reputation points

2023-09-21T11:16:08.5233333+00:00

We noticed that there is a permission called applicationimpersonation, which allows the current user to imitate another account to create subscription events. Is it related to this permission? Looking forward to your reply.

beem beem 0 Reputation points

2023-09-21T11:16:24.86+00:00

We noticed that there is a permission called applicationimpersonation, which allows the current user to imitate another account to create subscription events. Is it related to this permission? Looking forward to your reply.

beem beem 0 Reputation points

2023-09-21T11:58:34.43+00:00

Are you still online?

CarlZhao-MSFT 41,286 Reputation points

2023-09-22T02:00:43.5166667+00:00

Hi @beem beem

Sorry, I was offline at the time. Now let's move on to the issue.

beem beem 0 Reputation points

2023-09-22T02:08:51.3766667+00:00

Ok, thank you very much. Please continue to help analyze this problem. Thank you. We cannot use the application token to create subscription events for users. We have observed that there is a permission Applicationimpersonation, which can simulate the currently logged in user token as another user. They create subscription events so that when other users create calendar events, they can notify us of the event through webhook, so that we can automatically synchronize Outlook calendar events for users.

beem beem 0 Reputation points

2023-09-22T02:14:21.03+00:00

This is my code use case, please refer to it. We are currently logged in with the beem1@beem2023.onmicrosoft.com account. The subscription event "users/{id}/events" is automatically created for the beem2@beem2023.onmicrosoft.com account, and the account beem1 @beem2023.onmicrosoft.com has been granted the Applicationimpersonation permission, but the creation has been unsuccessful and a 400 error has been returned. { 'error': { 'code': 'ExtensionError', 'message': 'Operation: Create; Exception: [Status Code: BadRequest; Reason: The value 'https://outlook.office365.com/api/v2.0/Users('beem2%40beem2023.onmicrosoft.com') /Events' of parameter 'Resource' is invalid.]', 'innerError': { 'date': '2023-09-21T10:23:51', 'request-id': '472330d7-4ca0-4900-8c00-e4017a9560a4', 'client-request-id': '472330d7-4ca0-4900-8c00-e4017a9560a4' } } }

try {

/**获取当前用户token*/ String outlookAccessToken = outlookCalenderTokenService.getOutlookAccessToken(state, authorizationCode); for (String userId : userIds) { /**获取其它用户详情*/ String getUserUrl = outlookCalenderConfig.getGet_user_url().replace("${userPrincipalName}", userId); Response currentUserResponse = OkHttpUtil.get(getUserUrl, OkHttpUtil.buildAuthorizationMap(outlookAccessToken)); String userResBody = currentUserResponse.body().string(); log.info("state:{} get user info. response:{}.userResBody:{}", state, currentUserResponse, userResBody); UserDTO userDTO = GSONUtil.fromJson(userResBody, UserDTO.class); SubscriptionDTO subscription = new SubscriptionDTO(); subscription.setChangeType("created,updated,deleted"); subscription.setNotificationUrl(outlookCalenderConfig.getCallback_url()); /**为其它用户创建订阅事件*/ subscription.setResource("users/"+userDTO.getId()+"/events"); subscription.setExpirationDateTime(OffsetDateTime.now().plusDays(1).toString()); subscription.setClientState(UUID.randomUUID().toString()); subscription.setLatestSupportedTlsVersion("v1_2"); Response response = OkHttpUtil.post(outlookCalenderConfig.getSubscriptions_url(), OkHttpUtil.buildAuthorizationMap(outlookAccessToken), GSONUtil.toJson(subscription)); String subRes = response.body().string(); log.info("【subscription】【code】:{} state:{} subscription:【created,updated】 event. response:{}.subResBody:{}", response.code(), state, response, subRes); return subRes; } } catch (Exception exception) { }

beem beem 0 Reputation points

2023-09-22T02:33:46.8666667+00:00

hi Are you still online?

CarlZhao-MSFT 41,286 Reputation points

2023-09-22T02:40:30.0166667+00:00

Hi @beem beem

I've never heard of "permission Application impersonation", can you share documentation on it?

CarlZhao-MSFT 41,286 Reputation points

2023-09-22T02:42:27.5733333+00:00

I was just researching the code snippet you shared and wasted some time :)

CarlZhao-MSFT 41,286 Reputation points

2023-09-22T02:53:26.7533333+00:00

Hi @beem beem

As far as I know, currently we can get other users' calendar events in a delegated manner through shared calendars, but this does not apply to subscription change notifications.

If you want to subscription other users event changes, then using application-only permissions will be the only way.

beem beem 0 Reputation points

2023-09-22T02:54:18.1266667+00:00

Hmm, this is a document we saw on Feishu for synchronizing Outlook. "https://www.feishu.cn/hc/zh-CN/articles/549527304543-%E7%AE%A1%E7%90%86%E5%91%98%E5%A6%82%E4%BD%95%E4%B8%BA%E4%BC%81%E4%B8%9A%E7%94%A8%E6%88%B7%E9%85%8D%E7%BD%AE-exchange-%E6%97%A5%E5%8E%86%E4%B8%8E%E9%A3%9E%E4%B9%A6%E6%97%A5%E5%8E%86%E7%9A%84%E5%8F%8C%E5%90%91%E5%90%8C%E6%AD%A5" We suspect that by setting this Applicationimpersonation, we can simulate the account and automatically create subscription events for other accounts.

Is there anything wrong with my code? Or can you find out the cause by requesting the ID through our client? 'client-request-id': '472330d7-4ca0-4900-8c00-e4017a9560a4'

beem beem 0 Reputation points

2023-09-22T02:58:12.6866667+00:00

Hmm, this is a document we saw on Feishu for synchronizing Outlook. "https://www.feishu.cn/hc/zh-CN/articles/549527304543-%E7%AE%A1%E7%90%86%E5%91%98%E5%A6%82%E4%BD%95%E4%B8%BA%E4%BC%81%E4%B8%9A%E7%94%A8%E6%88%B7%E9%85%8D%E7%BD%AE-exchange-%E6%97%A5%E5%8E%86%E4%B8%8E%E9%A3%9E%E4%B9%A6%E6%97%A5%E5%8E%86%E7%9A%84%E5%8F%8C%E5%90%91%E5%90%8C%E6%AD%A5" We suspect that by setting this Applicationimpersonation, we can simulate the account and automatically create subscription events for other accounts.

Is there anything wrong with my code? Or can you find out the cause by requesting the ID through our client? 'client-request-id': '472330d7-4ca0-4900-8c00-e4017a9560a4'

CarlZhao-MSFT 41,286 Reputation points

2023-09-22T03:10:38.7533333+00:00

Hi @beem beem

Sorry, this document is a bit unfamiliar to me. I think the functions mentioned in the document may not be applicable to Outlook mailboxes.

As of now, I haven't come across any way to create event subscriptions for other users using delegated permissions.

If you have questions about this, please open a support ticket to get help from the Microsoft support team.

--Please click Accept Answer if above was helpful--

Thanks,

Carl
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

An error occurred when using the create subscription api 'Resource' is invalid.

1 answer

Your answer