Not able to send non-reply message. Getting "message":"Authorization has been denied for this request."

Question

Hi I am trying to send non-reply messages to my bot but getting error-Authorization has been denied for this request.

I was following https://learn.microsoft.com/en-us/azure/bot-service/rest-api/bot-framework-rest-connector-quickstart?view=azure-bot-service-4.0

Steps followed by me->

Step1 - Fetching bot access token ->

curl --header "Content-Type: application/x-www-form-urlencoded" \ --request POST \ --data "grant_type=client_credentials&client_id=id&client_secret=key&scope=https://graph.microsoft.com/.default" \ https://login.microsoftonline.com/botframework.com/oauth2/v2.0/token
Response-

{"token_type":"Bearer","expires_in":86398,"ext_expires_in":86398,"access_token":"eyJ0eXAiOiJKV1QiLCJub25jZSI6InBBVWQ4MDVVWmx3NXhmaFZta0VpUk4tMVhCYUhSOHdMSjZQLVhtM0dxN0UiLCJhbGciOiJSUzI1NiIsIng1dCI6Im5PbzNaRHJPRFhFSzFqS1doWHNsSFJfS1hFZyIsImtpZCI6Im5PbzNaRHJPRFhFSzFqS1doWHNsSFJfS1hFZyJ9.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.g6tl_GCc0Qym4sZCCDNqWoxs9pOTRS0V19xPLu-o4gmgY9U2cUfmwuGTUCvtb-8IVH_v46UPBwx5O4WYk42NpE46dT3LnYzHtcsbvjYKuu0g0xuqDuGp_ZWLo2c7D8EfC_Ik-CHx4Sn2kFo4fWZCuYThTXjDME8CZxo0dbh0_Nls_od29LJuo_DMLjGgIAFt2hWAiJJWg-Y8EXTjh3s5yONPYvfzcgPN0EKmVC_tFa14gpxrdyHJVXbz1BbkUZR9ooCG8UyjQlkkQIzufZyxmGEThTAZ37bUNcSurrmujFLDRinA"}

Step 2 - Fetch conversation id from bot and service url

Step 3- Send NON-reply message API.

curl --header "Content-Type: application/json" \  
  --header "Authorization: Bearer eyJ0eXAiOiJKV1QiLCJub25jZSI6Il9hOHFMTm1DNGhvc2pzSF9jcEo5aWFtcHVXNHhYQm1LRHJmZExfV2dPVTAiLCJhbGciOiJSUzI1NiIsIng1dCI6Im5PbzNaRHJPRFhFSzFqS1doWHNsSFJfS1hFZyIsImtpZCI6Im5PbzNaRHJPRFhFSzFqS1doWHNsSFJfS1hFZyJ9.XAiOiJhcHAiLCJyaCI6IjAuQVc0QUlKVFUxcHZ6OTAyaDNOV2FrMWh4MjJPNnJtLWpjcUZDcHRaUnpTRVhRbUZ1QUFBLiIsInRlbmFudF9yZWdpb25fc2NvcGUiOiJOQSIsInRpZCI6ImQ2ZDQ5NDIwLWYzOWItNGRmNy1hMWRjLWQ1OWE5MzU4NzFkYiIsInV0aSI6ImZMZmxaWDZtb0VHbWd4aTItYVIyQUEiLCJ2ZXIiOiIxLjAiLCJ3aWRzIjpbIjA5OTdhMWQwLTBkMWQtNGFjYi1iNDA4LWQ1Y2E3MzEyMWU5MCJdLCJ4bXNfdGNkdCI6MTQ2OTU4MTk2OH0.Ce7vi36_a6XPofbSWilcASJeQTySFzDVvebU-z8I-If8JLEyF2gUWAum_8r6j1Lkh439d92x1ZWBI4F7H_RX8FxNy6M_MfItCR412vMxub58072fZm71GP1oOLwrV8c__fJGVi_spXZeEtCmNXhZDl_fGgvaC9CKZtHEAKUJykOk-luPJLMO3l12ceqtD-UHkgDGWC2kWW2utuNwr_Ka5eenKHEsa9l8VJnHVFOLejTftFlMhTJ4GxjMJOpbykDpXO5tb2K6NECM4XGyxoJtJb6-sDPGctHtUFlLKzLulYQYk4n8Y9_o4cvWcpY4rW1yOb64ns75OhhSaa2mB_smEw" \  
  --request POST \  
  --data '{"type": "message", "from": {"id": "28:6faeba63-51cd21174261", "name": "naruto3333"}, "conversation": {"conversationType": "personal", "tenantId": "-47c4-aaffd41ec0c8", "id": "6sfhva7lO_lsg6sK2Pcw-NUReOrwfJi1iJrD00"}, "recipient": {"id": "29:1Lha4-A-0Du--9e3WP9JOtqy6tW3vqDhlsmPO3KRQ", "name": "nitin", "aadObjectId": "82f68a8e-b08b-b93e7d4f5276"}, "text": "I have these times available:sdsdsdsd"}' \  
  https://smba.trafficmanager.net/in/v3/conversations/a:1BPjCSjoFFt8Y9V9GnwmYcEBLwjAknF1qCD9EazwVN6sfhva7lO_lsg6sK2Pcw-NUReOrwfJi1iJrD00-HpAXgh-yC/activities  

Please help

Answer 1

@nitin sharma - The first request to fetch access token has incorrectly scoped to get access for https://graph.microsoft.com/.default which should be https://api.botframework.com/.default. You need to change your request as following:

curl --header "Content-Type: application/x-www-form-urlencoded" \ --request POST \ --data "grant_type=client_credentials&client_id=id&client_secret=key&scope=scope=https%3A%2F%2Fapi.botframework.com%2F.default" \ https://login.microsoftonline.com/botframework.com/oauth2/v2.0/token

Ref: Get an access token