Returning the 403 forbidden error

[1shoaibazhar]

I am using the Fluent Api client, also tried the HTTP client, I am getting the 403 forbidden error with correct credentials

Also attaching the list of api permissions I have granted on Azure

[koltyakov]

Hi @1shoaibazhar,

You granted Graph permissions. It's a different API.

You need API Permissions -> SharePoint :: Application :: Sites.FullControl.All -> Grant Admin Consent permissions in Azure app registration.

See more:

• https://go.spflow.com/auth/strategies/azure-certificate-auth
• https://learn.microsoft.com/en-us/sharepoint/dev/solution-guidance/security-apponly-azuread

[1shoaibazhar]

Hi @koltyakov , I have added the sharepoint sites full control as well, it still returns the same 403 forbidden error

[1shoaibazhar]

@koltyakov , I am using Client Id, Client Secret in the authcnfg

[koltyakov]

So it's not an Azure app which is used but legacy Add-in Only? Azure auth uses tenantId, clientId, certPath, certPass parameters. For Add-in auth you have to enable it and also grant permissions.