azure function authLevel anonymous requests authentication

Ken Faubel 26

I have been working with Azure functions with timer triggers for a while but I am now trying to get an httpTrigger to work and I must be doing something dumb. My project uses Nodejs (16) and I want anonymous access so I have my function.json setup like this:

{
  "bindings": [
    {
      "authLevel": "anonymous",
      "type": "httpTrigger",
      "direction": "in",
      "name": "req",
      "methods": [ "get" ],
      "route": "test/{key:alpha}"
    },
    {
      "type": "http",
      "direction": "out",
      "name": "res"
    }
  ],
  "scriptFile": "../dist/test/index.js"
}

When I run it locally with Advanced REST Client the function gets called and everything is good.

When I deploy it to Azure and run the request again it prompts with "Authentication required, The endpoint requires user credentials".

I looked around the settings in the Azure portal and everything looks OK to me. I see this and my other trigger functions and I can see under Integration that the function is setup for anonymous authorization.

I have been digging through articles about but no clues as to what I am doing wrong. Any ideas?

Many thanks

Ken

Jaliya Udagedara 2,731 Reputation points MVP

2022-04-16T20:20:38.487+00:00

Hmm, function.json looks correct. Can you check the Authentication in the Function App Level, just to make sure there's nothing set there?
Ken Faubel 26 Reputation points

2022-04-17T14:54:57.03+00:00
Thanks, let me check...

I checked there and all I see is an option to "Add an identity provider".

I also tried creating a new Azure Function project in VSCode called kfunctest with a single trigger called test. I picked anonymous for the authLevel and left everything else as the default. The function.json is the same as above except for the scriptFile which points to a different index.js file. I am using typescript but I did not make any changes to the index.ts file.

When I run it with curl I get:

~/OneDrive/projects $ curl -i https://kfunctest.scm.azurewebsites.net/api/test HTTP/1.1 401 Unauthorized Content-Length: 0 Date: Sun, 17 Apr 2022 15:23:14 GMT WWW-Authenticate: Basic realm="site"

I am wondering where in the world the 'basic auth" is coming from. As above the Authorization tab just has an option to "Add identity provider"
MughundhanRaveendran-MSFT 12,421 Reputation points

2022-04-18T14:26:39.7+00:00

@Ken Faubel , Could you please provide the screenshot of the auth prompt "Authentication required, The endpoint requires user credentials" ?
The kfunctest app doesnt have any authentication mechanism as I checked it from my end. Is there any auth libraries that you are using in the code?

Ken Faubel 26

Sure. Here is the screenshot

The index.ts file is unchanged from what the "add trigger" operation generated:

import { AzureFunction, Context, HttpRequest } from "@azure/functions"  
  
const httpTrigger: AzureFunction = async function (context: Context, req: HttpRequest): Promise<void> {  
    context.log('HTTP trigger function processed a request.');  
    const name = (req.query.name || (req.body && req.body.name));  
    const responseMessage = name  
        ? "Hello, " + name + ". This HTTP triggered function executed successfully."  
        : "This HTTP triggered function executed successfully. Pass a name in the query string or in the request body for a personalized response.";  
  
    context.res = {  
        // status: 200, /* Defaults to 200 */  
        body: responseMessage  
    };  
  
};  
  
export default httpTrigger;

There are no other dependencies in the project. I don't use ARC that much which is why I included the curl output as well.

Thank you!

Ken

Ken Faubel 26 Reputation points

2022-04-26T09:14:56.32+00:00

Was this information spark any ideas? I am still stuck. Thank you. - Ken
Marcin Berger 0 Reputation points

2023-03-16T20:22:21.8766667+00:00

Hey @Ken Faubel
I stacked exactly the same place. I hope you managed to figure it out.
I solved it and want to share my solution with you and other people.

After my changing "authLevel": "anonymous", and deployment via VSCode I finally noticed my function was automatically just ... disabled for ... some reasons.

I have just enabled my HTTP function and become again happy Azure user :)