This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 53%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESP%3C/text%3E%3C/svg%3E)
Hi, I'm trying to follow the tutorial for python application using DefaultAzureCredentials, but it said that my Authentication failed
from azure.data.tables import TableServiceClient
from azure.identity import DefaultAzureCredential
with TableServiceClient(
endpoint="https://manufactureprovision.table.core.windows.net",
credential=DefaultAzureCredential(),
) as table_service_client:
properties = table_service_client.get_service_properties()
print(f"{properties}")
Traceback (most recent call last):
File "C:\Users\Satria(Tio)Priambada\Downloads\ms-identity-python-desktop\1-Call-MsGraph-WithUsernamePassword\venv\lib\site-packages\azure\data\tables\_table_service_client.py", line 121, in get_service_properties
service_props = self._client.service.get_properties(timeout=timeout, **kwargs)
File "C:\Users\Satria(Tio)Priambada\Downloads\ms-identity-python-desktop\1-Call-MsGraph-WithUsernamePassword\venv\lib\site-packages\azure\core\tracing\decorator.py", line 78, in wrapper_use_tracer
return func(*args, **kwargs)
File "C:\Users\Satria(Tio)Priambada\Downloads\ms-identity-python-desktop\1-Call-MsGraph-WithUsernamePassword\venv\lib\site-packages\azure\data\tables\_generated\operations\_operations.py", line 2060, in get_properties
raise HttpResponseError(response=response, model=error)
azure.core.exceptions.HttpResponseError: Operation returned an invalid status 'Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature.'
Content: <?xml version="1.0" encoding="utf-8"?><m:error xmlns:m="http://schemas.microsoft.com/ado/2007/08/dataservices/metadata"><m:code>AuthenticationFailed</m:code><m:message xml:lang="en-US">Server failed to authenticate the request.
Make sure the value of Authorization header is formed correctly including the signature.
RequestId:a7034abb-a002-000e-2b40-a23706000000
Time:2024-05-09T18:44:49.8505805Z</m:message></m:error>
The above exception was the direct cause of the following exception:
Traceback (most recent call last):
File "C:\Users\Satria(Tio)Priambada\Downloads\ms-identity-python-desktop\1-Call-MsGraph-WithUsernamePassword\a.py", line 8, in <module>
properties = table_service_client.get_service_properties()
File "C:\Users\Satria(Tio)Priambada\Downloads\ms-identity-python-desktop\1-Call-MsGraph-WithUsernamePassword\venv\lib\site-packages\azure\core\tracing\decorator.py", line 78, in wrapper_use_tracer
return func(*args, **kwargs)
File "C:\Users\Satria(Tio)Priambada\Downloads\ms-identity-python-desktop\1-Call-MsGraph-WithUsernamePassword\venv\lib\site-packages\azure\data\tables\_table_service_client.py", line 124, in get_service_properties
_process_table_error(error)
File "C:\Users\Satria(Tio)Priambada\Downloads\ms-identity-python-desktop\1-Call-MsGraph-WithUsernamePassword\venv\lib\site-packages\azure\data\tables\_error.py", line 210, in _process_table_error
raise decoded_error from storage_error
azure.core.exceptions.ClientAuthenticationError: Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature.
RequestId:a7034abb-a002-000e-2b40-a23706000000
Time:2024-05-09T18:44:49.8505805Z
ErrorCode:AuthenticationFailed
{http://schemas.microsoft.com/ado/2007/08/dataservices/metadata}error:None
A possible cause of this error could be that the account URL used tocreate the Client includes an invalid path, for example the table name. Please check your account URL.
Content: <?xml version="1.0" encoding="utf-8"?><m:error xmlns:m="http://schemas.microsoft.com/ado/2007/08/dataservices/metadata"><m:code>AuthenticationFailed</m:code><m:message xml:lang="en-US">Server failed to authenticate the request.
Make sure the value of Authorization header is formed correctly including the signature.
RequestId:a7034abb-a002-000e-2b40-a23706000000
Time:2024-05-09T18:44:49.8505805Z</m:message></m:error>
I can see my resource from portal.azure.com without problem
I found the example instructions and code from https://pypi.org/project/azure-data-tables/
If someone can help me that'll be great!
Thanks and have a great day!
@Satria Priambada Thank you for reaching out.
Could you please share the tutorial you are following.
Regards,
Oury
Thank you for responding. I found the example instructions and code from https://pypi.org/project/azure-data-tables/
I want to achieve something similar to this https://stackoverflow.com/questions/59406391/access-azure-blob-storage-of-a-user-using-oauth2-token-obtained
Sorry double comment was my mistake
Thank you for providing additional details on this issue.
Are you authenticating via Visual Studio Code.?
Can you check the below.
Regatrds,
Oury
I'm not using Visual Studio. I'm using MSAL https://pypi.org/project/msal/ to get auth token.
I just want to use the auth token to access table like this post https://stackoverflow.com/questions/59406391/access-azure-blob-storage-of-a-user-using-oauth2-token-obtained
I don't have firewall
I do have Contributor role
I don't have proxy
# Import necessary libraries
from msal import ConfidentialClientApplication
# Define your Azure AD app details
client_id = "<your-client-id>"
client_secret = "<your-client-secret>"
authority = "https://login.microsoftonline.com/<your-tenant-id>"
# Create a ConfidentialClientApplication
app = ConfidentialClientApplication(
client_id,
authority=authority,
client_credential=client_secret
)
# Acquire an access token
result = app.acquire_token_for_client(scopes=["https://storage.azure.com/.default"])
# Use the access token for blob storage operations
access_token = result["access_token"]
```Did you try the above code?
Regards,
Oury
Hey sorry I gave up on using MS Entra product and token altogether...
This Q&A answer that looks like an AI interaction definitely didn't help
Out of curiosity, what's client_secret variable btw?
It seems that I just keep failing to convey my question....
I do not want to provide any secret to my app as the goal is to use user JWT Token to authenticate access to my storage, thus relying on Azure Entra role ID to secure my app
But it seems to be too much to ask from MS, so I just do "connection string" as "client_secret" and connect to Azure Table
Maybe if in the future MS shows better documentation on how to actually use MS Entra and AzureCredentials I'll loop back here
Thanks and have a great day!