Forum Discussion

amaaiia's avatar
amaaiia
Skilled Sharer
10 months ago

Get workspace components git status through API call

Hi,

I'm trying to get workspace components git status calling GET https://api.fabric.microsoft.com/v1/workspaces/{workspaceId}/git/status (https://learn.microsoft.com/es-es/rest/api/fabric/core/git/get-status).

 

I use de "Try it" tab in the official page, and using my user token, it works. However, I need it to do with service principal authentication. Doc says Workspace.GitUpdate.All is enough: 


I've added this API permission to my registered APP. 

 

However, I call the API and I get a 400 bad request error: 

If I change the token and I set my personal account token, it works. The issue is happening when I put registered APP token. 

 

I get the token with: 

{ "method": "POST", "headers": { "Content-Type": "application/x-www-form-urlencoded" }, "body": "grant_type=client_credentials&client_id=<client_id>&client_secret=<client_secret>&scope=  https://analysis.windows.net/powerbi/api/.default " } 

 

I've used this token also for other API calls such us:  

https://api.fabric.microsoft.com/v1/workspaces/{workspaceId}/{element_type}
And it works, so I gess the token is correct for the scope of Fabric. I don't know why I'm getting a 400 bad request response.
 
Thanks.

 

 

API for GraphQL
data engineering
Notebook
User Data Functions

10 Replies

  • tayloramy's avatar
    tayloramy
    Super User
    10 months ago

    Hi amaaiia, 

     

    Does the sersvicce principal have contributor or higher on the workspaces? These permissions are different from the delegated permissions in my experience. 

     

    If you found this helpful, consider giving some Kudos. If I answered your question or solved your problem, mark this post as the solution. 

      • tayloramy's avatar
        tayloramy
        Super User
        10 months ago

        Hi amaaiia, 

         

        Can you show me the exact POST request that you're sending? A 400 error usually means that your request is incorrect. Microsoft's APIs are particularly picky when it comes to the parameters and body.  

         

        If you found this helpful, consider giving some Kudos. If I answered your question or solved your problem, mark this post as the solution. 

  • v-sdhruv's avatar
    v-sdhruv
    Community Support
    10 months ago

    Hi amaaiia ,

    I hope you were successfully able to raise the support ticket.
    If you have any issues, please let us know.
    Thank You

  • KevinChant's avatar
    KevinChant
    Super User
    9 months ago

    I recommend testing this outside of your pipeline with something like Postman. Is this for CI/CD deployments?

  • Srisakthi's avatar
    Srisakthi
    Super User
    9 months ago

    Hi amaaiia ,

     

    I have used the below code and im able to get the result with Service Principal.

    function GetSecureTokenForServicePrincipal() {
    $secureServicePrincipalSecret = ConvertTo-SecureString -String $client_secret -AsPlainText -Force
    $credential = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $client_id, $secureServicePrincipalSecret

    #Login to Azure using service principal
    Connect-AzAccount -ServicePrincipal -TenantId $tenant_id -Subscription 'xxx-yyyy' -Credential $credential | Out-Null

    # Get authentication
    $secureFabricToken = (Get-AzAccessToken -AsSecureString -ResourceUrl $global:resourceUrl).Token

    return $secureFabricToken
    }
    function ConvertSecureStringToPlainText($secureString) {
    $ssPtr = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($secureString)
    try {
    $plainText = [System.Runtime.InteropServices.Marshal]::PtrToStringBSTR($ssPtr)
    } finally {
    [System.Runtime.InteropServices.Marshal]::ZeroFreeBSTR($ssPtr)
    }
    return $plainText
    }

    $secureFabricToken = GetSecureTokenForServicePrincipal
    $fabricToken = ConvertSecureStringToPlainText($secureFabricToken)

    $global:baseUrl = "https://api.fabric.microsoft.com/v1"
    $global:resourceUrl = "https://api.fabric.microsoft.com"

    $global:fabricHeaders = @{
    'Content-Type' = "application/json"
    'Authorization' = "Bearer $fabricToken"
    }
    $gitStatusUrl = "{0}/workspaces/{1}/git/status" -f $global:baseUrl, $workspace.Id
    $gitStatusResponse = Invoke-RestMethod -Headers $global:fabricHeaders -Uri $gitStatusUrl -Method GET

     

    Note: Service Principal is not supported for warehouse git sync. other items are getting sync from git to workspace except warehouse.

     

    Regards,

    Sri