[Account state issue] Fetch worksheets in a workbook - FileOpenUserUnauthorized - Could not obtain a WAC access token #3014

MetatronR · 2024-02-21T17:47:54Z

Describe the bug
Unable to access the worksheets of a workbook freshly created in my own drive.

DISCLAIMER: Once the bug happens, that particular account can't be used with the Excel endpoints anymore...

To Reproduce
Steps to reproduce the behavior:

Go to https://developer.microsoft.com/en-us/graph/graph-explorer
Connect account (Oauth2)
Go to the Excel section
Click on the worksheets in a workbook endpoint
Consent to the Files.ReadWrite permission
Replace the {drive-item-id} URL path placeholder with the ID of any newly created (or older) Excel file.

Expected behavior
Should receive the list of worksheets in the workbook.

Actual behavior
Receiving API error responses on bugged accounts (new accounts are not affected initially).

Device: any device - This is an internal API exception

Error response:

// Calling: GET https://graph.microsoft.com/v1.0/me/drive/items/{drive-item-id}/workbook/worksheets
{
    "error": {
        "code": "FileOpenUserUnauthorized",
        "message": "You do not have permissions to open this file in the browser.",
        "innerError": {
            "code": "unauthorizedUncategorized",
            "message": "Required authentication information for the resource is either missing or invalid.",
            "innerError": {
                "code": "FileOpenUserUnauthorized",
                "message": "You do not have permissions to open this file in the browser."
            },
            "date": "2024-02-21T17:41:21",
            "request-id": "5ea61f3a-4fa5-4eee-a688-c59580e5f38d",
            "client-request-id": "da72c07c-b20d-750e-b949-52e7f16ca7df"
        }
    }
}

Additional context
This behavior is pretty old. These issues would suddenly render an account unusable.
Once these issues happen, there is no way to use the same account with the workbook API endpoints.

Frequency:
Had over 900 errors (on many accounts - Oauth2) in the last 12+ months.
Over 200 exceptions in the last 14 days.

Previously the API response was:

// Calling: GET https://graph.microsoft.com/v1.0/me/drive/items/{drive-item-id}/workbook/worksheets
error: {
  code: AccessDenied, 
  innerError: {
    client-request-id: 7211bb30-a46d-472a-aacb-0e57371bf94e, 
    date: 2024-02-21T16:18:02, 
    request-id: 7211bb30-a46d-472a-aacb-0e57371bf94e
  }, 
  message: Could not obtain a WAC access token.
}

This bug renders any integration with the Microsoft Excel impossible as there no way control or prevent the API errors received while fetching the worksheets of a workbook.

What was tried (in the Graph Explorer):

Call GET https://graph.microsoft.com/v1.0/me/drive/items/{drive-item-id}/workbook/worksheets -> error
Call GET https://graph.microsoft.com/v1.0/me/drive/items/{drive-item-id}/workbook -> same error
Call POST https://graph.microsoft.com/v1.0/me/drive/items/{drive-item-id}/workbook/createSession -> same error
Call POST https://graph.microsoft.com/v1.0/me/drive/items/{drive-item-id}/workbook/worksheets -> same error
To use the beta endpoint. -> no change
To delete all files -> no change
To wait a few months... -> no change
To give all Files related permissions -> no change
To create/use new accounts -> only a matter of time until they get bugged
To share that file (anyone with the link) -> no change
To revoke the permission from https://microsoft.com/consent -> no change
To get the details using the https://graph.microsoft.com/v1.0/me/drive/items/{drive-item-id} endpoint -> works
- able to download the actual file -> works

 {
   "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#users('redacted%40outlook.com')/drive/items/$entity",
   "@microsoft.graph.downloadUrl": "https://my.microsoftpersonalcontent.com/personal/redacted/_layouts/15/download.aspx?redacted&ApiVersion=2.0",
   "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET me/drive/items('<key>')?$select=audio,bundle",
   "createdDateTime": "2024-02-21T17:08:46Z",
   "eTag": "\"{BFAB8571-F031-44A3-B24E-AB2225F3784E},4\"",
   "id": "42C71CBB2C347AB2!sbfab8571f03144a3b24eab2225f3784e",
   "lastModifiedDateTime": "2024-02-21T17:08:49Z",
   "name": "Book1.xlsx",
   "webUrl": "https://onedrive.live.com?cid=redacted",
   "cTag": "\"c:{BFAB8571-F031-44A3-B24E-AB2225F3784E},3\"",
   "size": 8169,
   "createdBy": {
       "application": {
           "id": "00000000-0000-0000-0000-0000481710a4",
           "displayName": "i:0i.t|ms.sp.ext|00000000-0000-0000-0000-0000481710a4@9188040d-6c67-4c5b-b112-36a304b66dad"
       },
       "user": {
           "email": "redacted@outlook.com",
           "id": "42c71cbb2c347ab2",
           "displayName": "redacted"
       }
   },
   "lastModifiedBy": {
       "user": {
           "email": redacted@outlook.com",
           "id": "42c71cbb2c347ab2",
           "displayName": "redacted"
       }
   },
   "parentReference": {
       "driveType": "personal",
       "driveId": "redacted",
       "id": "redacted",
       "name": "Documents",
       "path": "/drive/root:",
       "siteId": "redacted"
   },
   "file": {
       "mimeType": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
       "hashes": {
           "quickXorHash": "ELlta8FIrAaiuKfF4g6FIsgAq8k="
       }
   },
   "fileSystemInfo": {
       "createdDateTime": "2024-02-21T17:08:46Z",
       "lastModifiedDateTime": "2024-02-21T17:08:49Z"
   },
   "shared": {
       "scope": "users"
   }
}

The text was updated successfully, but these errors were encountered:

MetatronR · 2024-02-21T22:50:13Z

Email address for reference: bogdan.paun.visme@outlook.com

Please let me know if you need more info or access to this (demo) account.

Avisoul · 2024-02-22T06:30:56Z

Once these issues happen, there is no way to use the same account with the workbook API endpoints

I suppose, it also would be nice to have the damaged accounts revived in the end.

ElinorW · 2024-02-27T14:52:09Z

Hi @MetatronR,
This seems to be an issue with the Excel API's... could you please post this on the graph Q&A forum at https://aka.ms/askgraph where someone from the appropriate team will be able to help out.

vova-visme · 2024-03-04T12:04:57Z

@ElinorW thank you for coming to this ticket.
We were doing zoom with MS support team in India half year ago and it didn't bring any results, although we were promised that it will be investigated.
With all respect, above mentioned forum looks like another place to bury the issue for several years or forever.
The issue is reproducible in Graph Explorer as well, so maybe this repo is pretty relevant for investigating that, although it is not a source of the issue.
If you have any ways for direct contact with api devs team in mind, feel free to share, I will appreciate that.

ElinorW · 2024-03-05T12:34:06Z

Hi @vova-visme,
alright... Let me see what I can do

xxyziggy · 2024-03-05T15:33:28Z

I'm having the same issue with my account, please do investingte, we have hundreds of clients depending on this functionality

ilyamokka · 2024-04-15T09:18:24Z

I've encountered this issue with one of my accounts. It's a shame, I'd like to keep relying on Excel in my work

ElinorW · 2024-05-16T12:03:45Z

hey @MetatronR,

Are you able to access the file on the web? without the use of Graph API's?

vova-visme · 2024-05-16T20:42:46Z

@ElinorW the files are accessible and editable using OneDrive interface if that what you mean.

MetatronR · 2024-05-17T10:09:40Z

Hi, yes, the files are accessible both from OneDrive and from the API (list my items in drive and by ID).

Example (truncated) from search:

            "createdDateTime": "2023-07-03T17:25:14Z",
            "eTag": "\"{97267835-B5D7-4213-8F90-683AF56B12A7},8\"",
            "id": "42C71CBB2C347AB2!s97267835b5d742138f90683af56b12a7",
            "lastModifiedDateTime": "2023-07-03T17:27:42Z",
            "name": "TestWAC1.xlsx",
            "webUrl": "https://onedrive.live.com/personal/42c71cbb2c347ab2/_layouts/15/Doc.aspx?resid=42C71CBB2C347AB2!s97267835b5d742138f90683af56b12a7&cid=42c71cbb2c347ab2",
            "cTag": "\"c:{97267835-B5D7-4213-8F90-683AF56B12A7},6\"",
            "size": 9807,
                        "file": {
                "mimeType": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
                "hashes": {
                    "quickXorHash": "KmNoZn5d4fWeToIDr0TU1NmbO3A="
                }
            },
                        "fileSystemInfo": {
                "createdDateTime": "2023-07-03T17:25:14Z",
                "lastModifiedDateTime": "2023-07-03T17:27:42Z"
            },
            "shared": {
                "scope": "users"
            }

Also results got by calling https://graph.microsoft.com/v1.0/me/drive/items/42C71CBB2C347AB2!s97267835b5d742138f90683af56b12a7 :

    "createdDateTime": "2023-07-03T17:25:14Z",
    "eTag": "\"{97267835-B5D7-4213-8F90-683AF56B12A7},8\"",
    "id": "42C71CBB2C347AB2!s97267835b5d742138f90683af56b12a7",
    "lastModifiedDateTime": "2023-07-03T17:27:42Z",
    "name": "TestWAC1.xlsx",
    "webUrl": "https://onedrive.live.com/personal/42c71cbb2c347ab2/_layouts/15/Doc.aspx?resid=42C71CBB2C347AB2!s97267835b5d742138f90683af56b12a7&cid=42c71cbb2c347ab2",
    "cTag": "\"c:{97267835-B5D7-4213-8F90-683AF56B12A7},6\"",
    "size": 9807,
        "file": {
        "mimeType": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
        "hashes": {
            "quickXorHash": "KmNoZn5d4fWeToIDr0TU1NmbO3A="
        }
    },
    "fileSystemInfo": {
        "createdDateTime": "2023-07-03T17:25:14Z",
        "lastModifiedDateTime": "2023-07-03T17:27:42Z"
    },
    "shared": {
        "scope": "users"
    }

I get by calling https://graph.microsoft.com/v1.0/me/drive/items/42C71CBB2C347AB2!s97267835b5d742138f90683af56b12a7/workbook/worksheets (fresh error IDs) :

{
    "error": {
        "code": "FileOpenUserUnauthorized",
        "message": "You do not have permissions to open this file in the browser.",
        "innerError": {
            "code": "unauthorizedUncategorized",
            "message": "Required authentication information for the resource is either missing or invalid.",
            "innerError": {
                "code": "FileOpenUserUnauthorized",
                "message": "You do not have permissions to open this file in the browser."
            },
            "date": "2024-05-17T10:04:48",
            "request-id": "c3ff4e0d-a1d7-4b2b-9043-ee0fe9b9bc12",
            "client-request-id": "c30403e0-0ad5-2c22-05bc-9e2de1b26921"
        }
    }
}

All these calls have been made from the Graph Explorer using these scopes: Files.Read, Files.Read.All, Files.ReadWrite and Files.ReadWrite.All.

MetatronR · 2024-05-17T10:12:54Z

Observation: In the past (months) the error used as described in the initial message:

error: {
  code: AccessDenied, 
  innerError: {
    client-request-id: 7211bb30-a46d-472a-aacb-0e57371bf94e, 
    date: 2024-02-21T16:18:02, 
    request-id: 7211bb30-a46d-472a-aacb-0e57371bf94e
  }, 
  message: Could not obtain a WAC access token.
}

After some update it got replaced with:

{
    "error": {
        "code": "FileOpenUserUnauthorized",
        "message": "You do not have permissions to open this file in the browser.",
        "innerError": {
            "code": "unauthorizedUncategorized",
            "message": "Required authentication information for the resource is either missing or invalid.",
            "innerError": {
                "code": "FileOpenUserUnauthorized",
                "message": "You do not have permissions to open this file in the browser."
            },
            "date": "2024-05-17T10:04:48",
            "request-id": "c3ff4e0d-a1d7-4b2b-9043-ee0fe9b9bc12",
            "client-request-id": "c30403e0-0ad5-2c22-05bc-9e2de1b26921"
        }
    }
}

Yet the API is still not functional. That issues does not happen automatically on all accounts.
But once it happens once, that account will not be usable anymore with the Excel API.

musale · 2024-05-27T08:52:59Z

@MetatronR where is your excel file stored? According to the excel API docs https://learn.microsoft.com/en-us/graph/api/resources/excel?view=graph-rest-1.0, the API is only used for excel workbooks stored in OneDrive for Business, Sharepoint site or Group drive.

xxyziggy · 2024-07-03T18:32:20Z

Any updates on the issue? It still persists.

ElinorW · 2024-07-11T09:53:24Z

hi @xxyziggy,
Sorry for the delay on this issue...
I've been trying to get the team that handles this API to take a look at this, seems to be something with the OneDrive/SharePoint API... but I am not sure why they haven't followed up here.
I'll keep nudging them

ElinorW · 2024-07-11T19:05:22Z

Hey @MetatronR and @xxyziggy
Could either of you share a snippet of a recent call (shouldn't be older than 30 days) that shows the error message again, with the request ID and timestamp?
I need a recent log to share with the team.

MetatronR · 2024-07-11T19:17:36Z

GET https://graph.microsoft.com/v1.0/me/drive/items/42C71CBB2C347AB2!s97267835b5d742138f90683af56b12a7/workbook/worksheets -> 401

Response body:

{
    "error": {
        "code": "FileOpenUserUnauthorized",
        "message": "You do not have permissions to open this file in the browser.",
        "innerError": {
            "code": "unauthorizedUncategorized",
            "message": "Required authentication information for the resource is either missing or invalid.",
            "innerError": {
                "code": "FileOpenUserUnauthorized",
                "message": "You do not have permissions to open this file in the browser."
            },
            "date": "2024-07-11T19:14:47",
            "request-id": "c142c67d-fd8a-47fd-a3ae-79518d3ce9f2",
            "client-request-id": "0292446b-074e-5948-067c-c69b02f36e3c"
        }
    }
}

Response headers:

{
    "cache-control": "no-cache",
    "client-request-id": "0292446b-074e-5948-067c-c69b02f36e3c",
    "content-type": "application/json",
    "request-id": "c142c67d-fd8a-47fd-a3ae-79518d3ce9f2"
}

At the same time, GET https://graph.microsoft.com/v1.0/me/drive/items/42C71CBB2C347AB2!s97267835b5d742138f90683af56b12a7 works just fine.

MetatronR · 2024-07-11T19:19:03Z

A few more IDs just in case:

{
    "cache-control": "no-cache",
    "client-request-id": "82e264be-7c1a-9219-d6b5-62fd84711ff1",
    "content-type": "application/json",
    "request-id": "03aa5c3c-74f4-4ca9-9098-3e5fcc6a4ca1"
}

or

{
    "cache-control": "no-cache",
    "client-request-id": "241f883d-8116-7235-b4d6-f9856a6d666c",
    "content-type": "application/json",
    "request-id": "a76971f8-c669-45e5-9ea8-fb54831533a7"
}

ElinorW · 2024-07-11T19:22:09Z

thanks @MetatronR !
I'll get back to you once I get a response.

ElinorW · 2024-07-12T07:05:47Z

Hey @MetatronR,
Happy to share that the team responsible is in the process of rolling out the fixes for this issue.
They shared that this should be resolved by the end of the month and the damaged accounts will be revived as well.

vova-visme · 2024-08-05T14:39:43Z

Hi @ElinorW
Could you please share if there are any updates?
You were mentioning the end of previous month as a time frame for a probable resolution.
We will much appreciate any information you have as it is very anticipated topic by us and our clients.

ElinorW · 2024-08-22T13:48:08Z

Hi @MetatronR , @vova-visme ,
Are you still experiencing this issue?

microsoft-github-policy-service · 2024-08-26T14:03:01Z

This issue has been automatically marked as stale because it has been marked as requiring author feedback but has not had any activity for 4 days. It will be closed if no further activity occurs within 3 days of this comment.

vova-visme · 2024-08-26T14:21:35Z

hey @ElinorW
thank you for the update
we are testing with a business account now, as free accounts receive a message about the SPO license required
(hard not to mention that the main competitor doesn't ridiculously restrict their API in such way, but I understand that you can't do anything regarding that)
I will let you know if it started to work with business accounts

xxyziggy · 2024-08-28T09:42:12Z

Hi @ElinorW
I'm still having the same issue

Code: FileOpenUserUnauthorized
Message: You do not have permissions to open this file in the browser.
Inner error:
	Code: unauthorizedUncategorized
Message: Required authentication information for the resource is either missing or invalid.
Inner error:
	Code: FileOpenUserUnauthorized
Message: You do not have permissions to open this file in the browser.
AdditionalData:
	date: 2024-08-28T09:40:33
	request-id: 01f3961b-543a-483c-b1f1-2bed95ae283e
	client-request-id: 01f3961b-543a-483c-b1f1-2bed95ae283e
ClientRequestId: 01f3961b-543a-483c-b1f1-2bed95ae283e

microsoft-github-policy-service · 2024-09-01T10:32:29Z

This issue has been automatically marked as stale because it has been marked as requiring author feedback but has not had any activity for 4 days. It will be closed if no further activity occurs within 3 days of this comment.

microsoft-github-policy-service bot added the ToTriage label Feb 21, 2024

ElinorW added the Needs: Author Feedback label Feb 27, 2024

ElinorW self-assigned this Feb 27, 2024

microsoft-github-policy-service bot added ToTriage and removed ToTriage labels Feb 27, 2024

ElinorW removed the ToTriage label Feb 27, 2024

microsoft-github-policy-service bot added the Status: No Recent Activity label Mar 2, 2024

ElinorW added Status: Needs Investigation and removed Status: No Recent Activity Needs: Author Feedback labels Mar 5, 2024

ElinorW added Needs: Author Feedback labels May 16, 2024

microsoft-github-policy-service bot added Needs: Attention 👋 Author has responded to the issue and removed Needs: Author Feedback labels May 17, 2024

robertscl mentioned this issue Jul 12, 2024

Excel: Error from multiple endpoints—"You do not have permissions to open this file in the browser." OfficeDev/office-js#4506

Open

ElinorW added Needs: Author Feedback and removed Needs: Attention 👋 Author has responded to the issue labels Aug 22, 2024

microsoft-github-policy-service bot added the Status: No Recent Activity label Aug 26, 2024

ElinorW removed the Status: No Recent Activity label Aug 27, 2024

microsoft-github-policy-service bot added the Status: No Recent Activity label Sep 1, 2024

ElinorW removed Needs: Author Feedback Status: No Recent Activity labels Sep 2, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Account state issue] Fetch worksheets in a workbook - FileOpenUserUnauthorized - Could not obtain a WAC access token #3014

[Account state issue] Fetch worksheets in a workbook - FileOpenUserUnauthorized - Could not obtain a WAC access token #3014

MetatronR commented Feb 21, 2024 •

edited

Loading

MetatronR commented Feb 21, 2024

Avisoul commented Feb 22, 2024 •

edited

Loading

ElinorW commented Feb 27, 2024 •

edited

Loading

vova-visme commented Mar 4, 2024 •

edited

Loading

ElinorW commented Mar 5, 2024 •

edited

Loading

xxyziggy commented Mar 5, 2024 •

edited

Loading

ilyamokka commented Apr 15, 2024

ElinorW commented May 16, 2024

vova-visme commented May 16, 2024

MetatronR commented May 17, 2024

MetatronR commented May 17, 2024

musale commented May 27, 2024

xxyziggy commented Jul 3, 2024

ElinorW commented Jul 11, 2024

ElinorW commented Jul 11, 2024

MetatronR commented Jul 11, 2024

MetatronR commented Jul 11, 2024

ElinorW commented Jul 11, 2024

ElinorW commented Jul 12, 2024

vova-visme commented Aug 5, 2024

ElinorW commented Aug 22, 2024

microsoft-github-policy-service bot commented Aug 26, 2024

vova-visme commented Aug 26, 2024

xxyziggy commented Aug 28, 2024

microsoft-github-policy-service bot commented Sep 1, 2024

[Account state issue] Fetch worksheets in a workbook - FileOpenUserUnauthorized - Could not obtain a WAC access token #3014

[Account state issue] Fetch worksheets in a workbook - FileOpenUserUnauthorized - Could not obtain a WAC access token #3014

Comments

MetatronR commented Feb 21, 2024 • edited Loading

MetatronR commented Feb 21, 2024

Avisoul commented Feb 22, 2024 • edited Loading

ElinorW commented Feb 27, 2024 • edited Loading

vova-visme commented Mar 4, 2024 • edited Loading

ElinorW commented Mar 5, 2024 • edited Loading

xxyziggy commented Mar 5, 2024 • edited Loading

ilyamokka commented Apr 15, 2024

ElinorW commented May 16, 2024

vova-visme commented May 16, 2024

MetatronR commented May 17, 2024

MetatronR commented May 17, 2024

musale commented May 27, 2024

xxyziggy commented Jul 3, 2024

ElinorW commented Jul 11, 2024

ElinorW commented Jul 11, 2024

MetatronR commented Jul 11, 2024

MetatronR commented Jul 11, 2024

ElinorW commented Jul 11, 2024

ElinorW commented Jul 12, 2024

vova-visme commented Aug 5, 2024

ElinorW commented Aug 22, 2024

microsoft-github-policy-service bot commented Aug 26, 2024

vova-visme commented Aug 26, 2024

xxyziggy commented Aug 28, 2024

microsoft-github-policy-service bot commented Sep 1, 2024

MetatronR commented Feb 21, 2024 •

edited

Loading

Avisoul commented Feb 22, 2024 •

edited

Loading

ElinorW commented Feb 27, 2024 •

edited

Loading

vova-visme commented Mar 4, 2024 •

edited

Loading

ElinorW commented Mar 5, 2024 •

edited

Loading

xxyziggy commented Mar 5, 2024 •

edited

Loading