SPFX call gets error "interaction required" after turning on function's System Assigned Identity
I have an spfx web part that is connected an Azure Function. All was working until I turned on the System Assigned Identity for the function. Below is my configuration while it was working: Function app: contoso-fn App Service authentication enabled Unauthenticated requests get a 302 HTTP code Microsoft is the identity provider, with app registration "contoso-fn-auth" It allows token audiences from api://<id-contoso-fn-auth> and from <my-tenant>.sharepoint.com Allowed client applications include 08e18876-6177-487e-b8b5-cf950c1e598c and <id-contoso-fn-auth> CORS: https://learn.microsoft.com/en-us/answers/questions/4374948/spfx-making-call-to-azure-function-gets-error-inte and https://<my-tenant>.sharepoint.com App registration "contoso-fn-auth" (used above when setting up identity provider) Authentication > Web > Redirect URI: https://learn.microsoft.com/en-us/answers/questions/4374948/spfx-making-call-to-azure-function-gets-error-inte ID tokens issued only accounts in the tenant can access this API API permissions > contoso-fn-auth > user_impersonation ; Delegated; Status: granted for tenant Expose an API: Scopes api://<id-contoso-fn-auth>/user_impersonation The code in the SPFX to request the function is something like this: this.context.aadHttpClientFactory .getClient('<id-contoso-fn-auth') .then((client: AadHttpClient): void => { client.get(<url-to-the-fn>/api/upload)...}); In the SharePoint Admin Center, under Advanced > API Access, the user_impersonation permission is approved for contoso-fn. I then changed the Function app identity, turning on "system assigned", as I needed the function to authenticate against the Azure Blob Client, and now I'm getting the following error: interaction_required: Seamless single sign on failed for the user. This can happen if the user is unable to access on premises AD or intranet zone is not configured correctly I read something about turning on the function's system assigned identity affecting how I requests tokens using the aadHttpClientFactory, but I haven't been too successful in finding how to solve the issue (including internet search and asking several LLMs). I don't need my function to have user context (I could send that from the spfx) but I need this to work without any redirects. I would appreciate help to be able to call the function from the spfx seamlessly, while keeping the function secured with Microsoft identity. (porting from a https://learn.microsoft.com/en-us/answers/questions/4374948/spfx-making-call-to-azure-function-gets-error-inte, as requested)
Getting error when trying to get user access token in SPfx solution using MSAL
Referring https://github.com/microsoft/CopilotStudioSamples/tree/main/SharePointSSOComponent and tried to implement it. Getting error when trying to get user access token using MSAL. The Error is: Unsafe attempt to initiate navigation for frame with origin 'https://XXXX.sharepoint.com' from frame with URL 'https://login.microsoftonline.com/XXXXXXXX-595d-472c-8248-0dc58f852d61/oaut…04MDZhLTc4NTFlOGEzNWJjNSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19'. The frame attempting navigation of the top-level window is sandboxed, but the flag of 'allow-top-navigation' or 'allow-top-navigation-by-user-activation' is not set. Issue is intermittent and usually occurs when running on local
Prevent Automatically Opening the File Explorer on the Upload Tab (filepicker)
I am working on an application customizer that will inject custom UI into the File Picker's Upload tab. Because of this, I want to prevent the file explorer from automatically opening when the user clicks on the Upload tab. I’ve tried several methods to achieve this by manipulating the DOM through my custom code in the application customizer. I even tried removing the "file" input element from my custom code. However, the file explorer still opens automatically when the user clicks on the Upload tab. Is there any way to prevent this?
Newly submitted items are not displayed when SPFx Field Customizer
When applying the SPFx Field Customizer, the list will be displayed in the old UI. When I post an item to the old UI list, the latest item posted is shown in the list view, but it does not immediately appear on the screen where it is pasted as a web part on the page. Steps: Prepare a list with SPFx's Field Customizer applied Display the target list on the page Display the page and the list in separate tabs Post an item to the target list The item does not appear on the page where the list web part is placed Reloading (F5) on the page sometimes shows or does not show the latest item
Curious: Are SPFx Extensions Supported in OneDrive?
Hi everyone, 👋 I'm fairly new to the SharePoint Framework (SPFx) world and have been exploring its possibilities. It's been an exciting journey so far, but I’ve hit a bit of a question that I couldn't find a clear answer to. Does anyone know if SPFx extensions are supported in OneDrive? I understand they work great in SharePoint, but I’m wondering if we can extend the same functionality to OneDrive. If not, does anyone have insights into whether there’s a chance that Microsoft might bring SPFx extensions to OneDrive in the future? I’d love to hear your thoughts or any advice you have to share! Thanks for taking the time to help. 😊 Cheers, Sachin
Form Customization Permissions?
1. I wrote a SharePoint form customization using SPFx ( TypeScript / React ). 2. I have a large pool of external users and each month I will send emails to a portion of those users. 3. The email will contain a link back to a page on my SharePoint site. 4. The page on the site will contain one or more links to list items that require the user to edit and save. 5. When the user clicks on one of those links, the corresponding list item will be displayed using my form customization. 6. The user will edit the information, save the form, and be directed back to the site page with the links to the list items. Everything works fine up to (and including) #4. However, when the user clicks on one of those links, only a blank page appears and using F12 I see the following: ----------------------------------------------------------------------------------------------------------------- Refused to execute script from 'https://<tenant>/sites/appcatalog/_layouts/15/AccessDenied....' because it's MIME type ('text/html') is not executable, and string MIME type checking is enabled ----------------------------------------------------------------------------------------------------------------- The users are all included in the "members" group of the site and should have edit permissions. However, this error message seems as though there is some permission missing from the actual form customization application that I deployed to the app catalog and then enabled on this specific site. Internal users do not experience this issue, only external users. Are there permissions I need to configure on a form customization application?Modify a Teams tab solution from GitHub to match the customer requirments
I am working on a new project and the customer have already installed and used this Teams tab from GitHub @ https://github.com/OfficeDev/microsoft-teams-emergency-operations-center Now they want to do some modifications to this solution, such as :- Change some titles for the fields currently when an item get created it provision some channels on teams, so they want to modify the name of those channels and provision more channels. So my first question is about how i need to do those changes,, are those steps valid:- Clone the code from the above github link modify the code accordingly Deploy and publish the solution to get a new .sppkg solution and re-upload it to the sharepoint app are those valid steps to do the modifications? i built a lot of SPFx solutions, but never modify existing one on GitHub. Second Question, when the customer install this solution for the first time, a new site and lists were provisioned... so if i replace the old .sppkg file with the new one, will this re-provision the site and the lists? or this will only happen when we installed this solution for the first time only? Third question, now if i do those modifications inside our local version after cloning the solution, and Microsoft releases a new version of this app inside GitHub, and we want to have this new version, then our local modification done previously will get lost? am i correct? so can we for example post those changes to GitHub as well, so they will be part of the new releases done by Microsoft ? ThanksForce a link to open in a popup inside the Detailed List layout inside PnP Modern search WebPart
I have the following setting inside my PnP Modern search result:- Here is the code:- <a href="{{slot item @root.slots.PreviewUrl}}" data-interception="off" target="_blank" style="color: {{@root.theme.semanticColors.link}}"> {{slot item @root.slots.Destination}} </a> Currently the link will open in a new tab. so can i force the link to open in a popup window ? instead of a new tab? Thanks
