Hacktoberfest 2026：维护者为十月标记出来的 issue，仍然开放、适合新手。 浏览 Hacktoberfest issue

[Bug] `pa app add data-source` / `pa connection list-datasets` fails with AuthenticationError for shared_sharepointonline, even on a brand-new connection

未关闭
  • 哪里不对？
#459 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看

还没有人认领这个 Issue。

评估

难度
4/5
预计耗时
3-5 天
新手友好度
48/100
Issue 类型
缺陷
描述清晰度
需要澄清
活跃度
活跃
技术栈
typescript
领域
api, authentication, cli

调研方向

先使用 pa connection list-datasets 和 pa app add data-source 对 shared_sharepointonline 重现该故障，然后跟踪身份验证和连接器 API 请求路径，并将其与成功的 Dataverse 命令进行比较。完成标准是：新的交互式连接可以列出 SharePoint 数据集，并添加表格数据源，而不会出现 403 或 AuthenticationError。

由索引模型根据 Issue 内容生成。

描述

bug

Environment

  • pa --version: 1.0.1
  • Cloud: commercial (not GCC/GCC High/DoD) — confirmed via make.powerapps.com
  • OS/shell: Windows 11, PowerShell
  • Auth: interactive user (pa auth login), not a service principal

Symptom

Adding a SharePoint Online tabular data source fails with a 403 directly from the connector API Management layer:

HTTP error status: 403 for GET https://<env>.01.common.usa002.azure-apihub.net/apim/sharepointonline/<connection-id>/$metadata.json/datasets/<encoded-site-url>/tables/<encoded-table-name>

Response body:

{
  "Message": "Missing Authorization header for a privileged call on connection.",
  "Source": "product policy"
}

The same failure reproduces one level down, using pa connection list-datasets directly (no table/dataset involved at all):

pa connection list-datasets --connector shared_sharepointonline --connection-id <connection-id>

Failed to get datasets for connection '<connection-id>' and connector 'shared_sharepointonline': {"exitCode":3,"remediation":"Run `pa auth login` to sign in, or verify you have access to this environment.","name":"AuthenticationError"}

What I've ruled out

  • Not a stale/broken connection: created a brand-new shared_sharepointonline connection via pa connection create --connector shared_sharepointonline (fresh interactive OAuth consent, browser sign-in completed successfully). The new connection fails identically with the same AuthenticationError.
  • Not connection ownership: pa connection list shows both connections owned by the currently authenticated user.
  • Not environment mismatch: both connections appear under pa connection list in the active environment, matching environmentId in power.config.json.
  • Not a service-principal auth issue: pa auth status shows an interactive user account, not an app registration.
  • Not table-name encoding: reproduces even at the list-datasets step, before any table/dataset value is involved.
  • Not GCC-specific (ruling out the class of bug in #348 / AADSTS65002): confirmed via make.powerapps.com this is a standard commercial tenant, and the error text/code here is a different one ("Missing Authorization header for a privileged call on connection" / product policy, not AADSTS65002).
  • Not a broader auth/environment breakdown: pa app add data-source --connector dataverse --table account succeeds cleanly in the same environment, same auth session, same power.config.json. The failure is isolated to shared_sharepointonline.

Repro steps

  1. pa auth login (interactive user)
  2. pa connection create --connector shared_sharepointonline (complete browser OAuth)
  3. pa connection list-datasets --connector shared_sharepointonline --connection-id <new-connection-id>
  4. Observe AuthenticationError / 403 "Missing Authorization header for a privileged call on connection" (product policy)
主要语言
TypeScript
星标
504
派生
145
平均合并
4 小时 3 分钟
30 天内合并 PR
1

环境准备

我们还没有检查这个项目的环境配置文件。先看它的 README，通用步骤见我们的新手贡献指南。

从这里开始

  1. 先读完整个 Issue，再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库，在一个分支上完成修改。
  4. 提交 Pull Request，并在描述里引用这个 Issue 编号。

microsoft/PowerAppsCodeApps 的其他 Issue

查看 microsoft/PowerAppsCodeApps 的全部 Issue

相似的 Issue

更多 TypeScript Issue

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。