Invalid AppId passed on token: <app_ID>

Question

Invalid AppId passed on token: <app_ID>

Hi Team, I'm trying to authenticate incoming request from bot connector service to bot.
I have implemented the following code to validate the request but I'm getting error:

public boolean validateRequest(String headerAuthenticationValue, String request) throws ExecutionException, InterruptedException {
Activity botPayload = gson.fromJson(request, Activity.class);
boolean isValid = validateAuthToken(headerAuthenticationValue, botPayload);
return isValid;
}

private static boolean validateAuthToken(String headerAuthenticationValue, Activity botPayload) throws ExecutionException, InterruptedException {
CredentialProvider credentialProvider = new SimpleCredentialProvider();
CompletableFuture<ClaimsIdentity> claimsIdentity = authenticateToken(headerAuthenticationValue,
credentialProvider,
botPayload.getChannelId(),
botPayload.getServiceUrl());
if(claimsIdentity.get().isAuthenticated()){
return true;
}
return false;
}

   com.microsoft.bot.connector.authentication.AuthenticationException:Invalid AppId passed on token: <app_ID> (App id received in header)

P.S I have not published my bot yet. I create the bot through app studio.
Documents referred - https://learn.microsoft.com/en-us/azure/bot-service/rest-api/bot-framework-rest-connector-authentication?view=azure-bot-service-4.0#connector-to-bot

ChetanSharmamsft 781 Reputation points Microsoft Vendor

2022-02-15T05:38:09.807+00:00

@Supriya Saraogi - Looks like your configuration is wrong for App_Id, so could you please reverify it once?
romungi-MSFT 30,291 Reputation points Microsoft Employee

2022-02-17T06:51:20.983+00:00
@Supriya Saraogi To add to the below comment, Is the bot successfully registered with the bot framework where the app id and password is generated. You could try the following query using postman to check if the app id and password can be used to generate a token.

POST https://login.microsoftonline.com/botframework.com/oauth2/v2.0/token Host: login.microsoftonline.com Content-Type: application/x-www-form-urlencoded grant_type=client_credentials&client_id=MICROSOFT-APP-ID&client_secret=MICROSOFT-APP-PASSWORD&scope=https%3A%2F%2Fapi.botframework.com%2F.default
ChetanSharmamsft 781 Reputation points Microsoft Vendor

2022-03-04T13:47:28.543+00:00

@Supriya Saraogi - Could you please confirm if your issue has resolved with above suggestion or still looking for any help?

ChetanSharmamsft 781 Reputation points Microsoft Vendor

2022-02-15T05:38:09.807+00:00

@Supriya Saraogi - Looks like your configuration is wrong for App_Id, so could you please reverify it once?
romungi-MSFT 30,291 Reputation points Microsoft Employee

2022-02-17T06:51:20.983+00:00

@Supriya Saraogi To add to the below comment, Is the bot successfully registered with the bot framework where the app id and password is generated. You could try the following query using postman to check if the app id and password can be used to generate a token.

POST https://login.microsoftonline.com/botframework.com/oauth2/v2.0/token Host: login.microsoftonline.com Content-Type: application/x-www-form-urlencoded grant_type=client_credentials&client_id=MICROSOFT-APP-ID&client_secret=MICROSOFT-APP-PASSWORD&scope=https%3A%2F%2Fapi.botframework.com%2F.default
ChetanSharmamsft 781 Reputation points Microsoft Vendor

2022-03-04T13:47:28.543+00:00

@Supriya Saraogi - Could you please confirm if your issue has resolved with above suggestion or still looking for any help?

Answer 1

Hello @Supriya Saraogi

I hope you have solved your issue and I just want to double click on this issue to see if you need further help. I think Rohit and Chetan both pointed out "App_Id" may be the root cause, I hope you have chance to check on above workarounds.

Please let us know if you need deeper help. Thanks.

Regards,
Yutong

Answer 2

@romungi-MSFT , @YutongTie-MSFT
Hi, I'm getting the same error, and I've tried using the API as you suggested from postman and got the expected result (status code 200 and a token)
I've opened a github issue: https://github.com/microsoft/botbuilder-python/issues/1983

please help with this since ms-teams and developer portal had and still have some other bugs that made us issues during some POC's and we would like to fix this ASAP.

Invalid AppId passed on token: <app_ID>

2 answers

Activity