phillipharding

Azure AD Token Generation using a Certificate Secret Client Credentials Flow

Microsoft identity platform and the OAuth 2.0 client credentials flow

Details about the client credentials flow

https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow

Microsoft identity platform application authentication certificate credentials

Details about the certificate assertion value for the client credentials flow

phillipharding

Upgrading a Functions App and Code-base to the v4 Runtime

References.

• Migrate apps from Azure Functions version 3.x to version 4.x
• Azure Functions runtime versions overview
• Work with Azure Functions Core Tools
• Durable Functions versions overview
• Extension bundles
• [Fix output data serialization format in Node.js functions #2007](https:

phillipharding

/*
  Hit 'ctrl + d' or 'cmd + d' to run the code, view console for results
*/
import { IWeb, sp, Web } from "@pnp/sp/presets/all";
import { HttpRequestError } from "./@pnp/odata";

const TranslatePnPError = async (opText: string, e) => {
  if (e?.isHttpRequestError) {
    const json = await (<HttpRequestError>e).response.json();
    const errorObject = typeof json["odata.error"] === "object" ? {...json["odata.error"]} : {...e};

phillipharding

//import { sp, Site, spGet, SharePointQueryable } from "@pnp/sp/presets/all";
import { sp } from "@pnp/sp";
import { Site } from "@pnp/sp/sites";
import "@pnp/sp/sites";

import { IFetchOptions } from "@pnp/common";

console.clear();
(async () => {
  // get site using PnPJs

phillipharding

(function(window, undefined) {
"use strict";

/**** The following HTML (script) template is placed on the page
<script id="po1persontemplate" type="text/x-custom-template">
	<li>
		<div class='people_details'>
			<h3>{0}</h3>
			<p class='people_job_title'>{1}</p>
			<div class='people_description'>{2}</div>

phillipharding

Use SPFx to get a Delegated Access Token

Note the tokenAcquisitionEvent part of the code doesn't seem to work

Using this technique you can acquire a delegated access token for a resource, SharePoint or the Graph API, and pass that token onto a HTTP triggered Azure Functions endpoint for it to use to call the appropriate API.

This is a simple re-imagination of the on-behalf-of flow involving a secured Azure Functions endpoint then executing an OAuth on-behalf-of flow to exchange the received access token for one which can be used to call an API on behalf of the calling user.

Documented originally by Paolo Pialorsi and Joel Rodrigues

phillipharding

/** References:
 * https://www.npmjs.com/package/azure-ad-verify-token
 * https://github.com/justinlettau/azure-ad-verify-token
 * https://liangjunjiang.medium.com/verify-and-decode-azure-activity-directory-token-bc72cf7010bc
 * https://liangjunjiang.medium.com/azure-active-directory-api-v1-0-vs-v2-0-5c75fb2b1154
 * https://www.npmjs.com/package/jwks-rsa
 * https://www.npmjs.com/package/jsonwebtoken
 * https://www.voitanos.io/blog/validating-azure-ad-generated-oauth-tokens
 * 
 * NOTE: 

phillipharding

(async function() {

function getFailedResponseData(response) {
    return new Promise( async (resolve) => {

        const ct = response.headers.get("Content-Type") || "";
        let data = {};
        if (ct.match("application/json")) {
            data = await response.json();
        } else {

phillipharding

See: 
- https://robertschouten.com/2018/04/30/update-file-metadata-with-rest-api-using-validateupdatelistitem-method/
- http://blog.arvosys.com/2018/07/06/list-items-system-update-options-in-sharepoint-online/index.html

FieldValues = 
[
  // Text field (single line and note)
  { FieldName: "TextField", FieldValue: "123" },

  // Number field

phillipharding

javascript:(function(){var a=new URL(window.location.href);"5"===a.searchParams.get("view")&&(a.hash?a.hash="":a.hash="view=13"),document.location=a.href})();