azure function authLevel anonymous requests authentication

Question

azure function authLevel anonymous requests authentication

Ken Faubel 6

I have been working with Azure functions with timer triggers for a while but I am now trying to get an httpTrigger to work and I must be doing something dumb. My project uses Nodejs (16) and I want anonymous access so I have my function.json setup like this:

{
  "bindings": [
    {
      "authLevel": "anonymous",
      "type": "httpTrigger",
      "direction": "in",
      "name": "req",
      "methods": [ "get" ],
      "route": "test/{key:alpha}"
    },
    {
      "type": "http",
      "direction": "out",
      "name": "res"
    }
  ],
  "scriptFile": "../dist/test/index.js"
}

When I run it locally with Advanced REST Client the function gets called and everything is good.

When I deploy it to Azure and run the request again it prompts with "Authentication required, The endpoint requires user credentials".

I looked around the settings in the Azure portal and everything looks OK to me. I see this and my other trigger functions and I can see under Integration that the function is setup for anonymous authorization.

I have been digging through articles about but no clues as to what I am doing wrong. Any ideas?

Many thanks

Ken

Jaliya Udagedara 2,706 Reputation points MVP

2022-04-16T20:20:38.487+00:00

Hmm, function.json looks correct. Can you check the Authentication in the Function App Level, just to make sure there's nothing set there?
Ken Faubel 6 Reputation points

2022-04-17T14:54:57.03+00:00
Thanks, let me check...

I checked there and all I see is an option to "Add an identity provider".

I also tried creating a new Azure Function project in VSCode called kfunctest with a single trigger called test. I picked anonymous for the authLevel and left everything else as the default. The function.json is the same as above except for the scriptFile which points to a different index.js file. I am using typescript but I did not make any changes to the index.ts file.

When I run it with curl I get:

~/OneDrive/projects $ curl -i https://kfunctest.scm.azurewebsites.net/api/test HTTP/1.1 401 Unauthorized Content-Length: 0 Date: Sun, 17 Apr 2022 15:23:14 GMT WWW-Authenticate: Basic realm="site"

I am wondering where in the world the 'basic auth" is coming from. As above the Authorization tab just has an option to "Add identity provider"
MughundhanRaveendran-MSFT 12,221 Reputation points

2022-04-18T14:26:39.7+00:00

@Ken Faubel , Could you please provide the screenshot of the auth prompt "Authentication required, The endpoint requires user credentials" ?
The kfunctest app doesnt have any authentication mechanism as I checked it from my end. Is there any auth libraries that you are using in the code?

Ken Faubel 6

Sure. Here is the screenshot

The index.ts file is unchanged from what the "add trigger" operation generated:

import { AzureFunction, Context, HttpRequest } from "@azure/functions"  
  
const httpTrigger: AzureFunction = async function (context: Context, req: HttpRequest): Promise<void> {  
    context.log('HTTP trigger function processed a request.');  
    const name = (req.query.name || (req.body && req.body.name));  
    const responseMessage = name  
        ? "Hello, " + name + ". This HTTP triggered function executed successfully."  
        : "This HTTP triggered function executed successfully. Pass a name in the query string or in the request body for a personalized response.";  
  
    context.res = {  
        // status: 200, /* Defaults to 200 */  
        body: responseMessage  
    };  
  
};  
  
export default httpTrigger;

There are no other dependencies in the project. I don't use ARC that much which is why I included the curl output as well.

Thank you!

Ken

Ken Faubel 6 Reputation points

2022-04-26T09:14:56.32+00:00

Was this information spark any ideas? I am still stuck. Thank you. - Ken
Marcin Berger 0 Reputation points

2023-03-16T20:22:21.8766667+00:00

Hey @Ken Faubel
I stacked exactly the same place. I hope you managed to figure it out.
I solved it and want to share my solution with you and other people.

After my changing "authLevel": "anonymous", and deployment via VSCode I finally noticed my function was automatically just ... disabled for ... some reasons.

I have just enabled my HTTP function and become again happy Azure user :)

Jaliya Udagedara 2,706 Reputation points MVP

2022-04-16T20:20:38.487+00:00

Hmm, function.json looks correct. Can you check the Authentication in the Function App Level, just to make sure there's nothing set there?
Ken Faubel 6 Reputation points

2022-04-17T14:54:57.03+00:00

Thanks, let me check...

I checked there and all I see is an option to "Add an identity provider".

I also tried creating a new Azure Function project in VSCode called kfunctest with a single trigger called test. I picked anonymous for the authLevel and left everything else as the default. The function.json is the same as above except for the scriptFile which points to a different index.js file. I am using typescript but I did not make any changes to the index.ts file.

When I run it with curl I get:

~/OneDrive/projects $ curl -i https://kfunctest.scm.azurewebsites.net/api/test HTTP/1.1 401 Unauthorized Content-Length: 0 Date: Sun, 17 Apr 2022 15:23:14 GMT WWW-Authenticate: Basic realm="site"

I am wondering where in the world the 'basic auth" is coming from. As above the Authorization tab just has an option to "Add identity provider"
MughundhanRaveendran-MSFT 12,221 Reputation points

2022-04-18T14:26:39.7+00:00

@Ken Faubel , Could you please provide the screenshot of the auth prompt "Authentication required, The endpoint requires user credentials" ?
The kfunctest app doesnt have any authentication mechanism as I checked it from my end. Is there any auth libraries that you are using in the code?
Ken Faubel 6 Reputation points

2022-04-18T16:57:27.217+00:00

Sure. Here is the screenshot

The index.ts file is unchanged from what the "add trigger" operation generated:

import { AzureFunction, Context, HttpRequest } from "@azure/functions" const httpTrigger: AzureFunction = async function (context: Context, req: HttpRequest): Promise<void> { context.log('HTTP trigger function processed a request.'); const name = (req.query.name || (req.body && req.body.name)); const responseMessage = name ? "Hello, " + name + ". This HTTP triggered function executed successfully." : "This HTTP triggered function executed successfully. Pass a name in the query string or in the request body for a personalized response."; context.res = { // status: 200, /* Defaults to 200 */ body: responseMessage }; }; export default httpTrigger;

There are no other dependencies in the project. I don't use ARC that much which is why I included the curl output as well.

Thank you!

Ken
Ken Faubel 6 Reputation points

2022-04-26T09:14:56.32+00:00

Was this information spark any ideas? I am still stuck. Thank you. - Ken
Marcin Berger 0 Reputation points

2023-03-16T20:22:21.8766667+00:00

Hey @Ken Faubel
I stacked exactly the same place. I hope you managed to figure it out.
I solved it and want to share my solution with you and other people.

After my changing "authLevel": "anonymous", and deployment via VSCode I finally noticed my function was automatically just ... disabled for ... some reasons.

I have just enabled my HTTP function and become again happy Azure user :)

azure function authLevel anonymous requests authentication

Activity