Mixing
Does/Should Azure Function authorisation apply when the function is called by a logic app in the same...
I have an Azure Function with a HTTP trigger and have set the authorisation level on the function to AuthorizationLevel.Function. When calling the function from something like Postman I have to supply the function-key as I expect and I receive a 200 code when it executes (otherwise i get a 401: Unauthorised Access).
However when calling the Function via a Logic App within the same subscription (using the Azure Functions action), the Logic App and Function executes successfully without the need for a function Key.
I would expect the Function to still request the function key from the Logic App, unless this does not apply to resources within the same subscription?
Logic App Build:
Logic App Execution:
azure azure-functions azure-logic-apps edited Jan 2 at 14:55
Dadep
2,33041833
asked Jan 2 at 14:42
JAAJAA
31
add a comment |
I have an Azure Function with a HTTP trigger and have set the authorisation level on the function to AuthorizationLevel.Function. When calling the function from something like Postman I have to supply the function-key as I expect and I receive a 200 code when it executes (otherwise i get a 401: Unauthorised Access).
However when calling the Function via a Logic App within the same subscription (using the Azure Functions action), the Logic App and Function executes successfully without the need for a function Key.
I would expect the Function to still request the function key from the Logic App, unless this does not apply to resources within the same subscription?
Logic App Build:
Logic App Execution:
azure azure-functions azure-logic-apps edited Jan 2 at 14:55
Dadep
2,33041833
asked Jan 2 at 14:42
JAAJAA
31
Please don't link an images to your post. Instead, just embed the image to your question by clicking the image icon on the top of the editor box.
– Novak
Jan 2 at 14:48
Apologies! It wouldn't let me because it was my first post
– JAA
Jan 2 at 16:07
add a comment |
I have an Azure Function with a HTTP trigger and have set the authorisation level on the function to AuthorizationLevel.Function. When calling the function from something like Postman I have to supply the function-key as I expect and I receive a 200 code when it executes (otherwise i get a 401: Unauthorised Access).
However when calling the Function via a Logic App within the same subscription (using the Azure Functions action), the Logic App and Function executes successfully without the need for a function Key.
I would expect the Function to still request the function key from the Logic App, unless this does not apply to resources within the same subscription?
Logic App Build:
Logic App Execution:
azure azure-functions azure-logic-apps edited Jan 2 at 14:55
Dadep
2,33041833
asked Jan 2 at 14:42
JAAJAA
31
I have an Azure Function with a HTTP trigger and have set the authorisation level on the function to AuthorizationLevel.Function. When calling the function from something like Postman I have to supply the function-key as I expect and I receive a 200 code when it executes (otherwise i get a 401: Unauthorised Access).
However when calling the Function via a Logic App within the same subscription (using the Azure Functions action), the Logic App and Function executes successfully without the need for a function Key.
I would expect the Function to still request the function key from the Logic App, unless this does not apply to resources within the same subscription?
Logic App Build:
Logic App Execution:
azure azure-functions azure-logic-apps azure azure-functions azure-logic-apps edited Jan 2 at 14:55
Dadep
2,33041833
asked Jan 2 at 14:42
JAAJAA
31
edited Jan 2 at 14:55
Dadep
2,33041833
asked Jan 2 at 14:42
JAAJAA
31
edited Jan 2 at 14:55
Dadep
2,33041833
edited Jan 2 at 14:55
Dadep
2,33041833
edited Jan 2 at 14:55
Dadep
2,33041833
2,33041833
asked Jan 2 at 14:42
JAAJAA
31
asked Jan 2 at 14:42
JAAJAA
31
asked Jan 2 at 14:42
JAAJAA
31
31
Please don't link an images to your post. Instead, just embed the image to your question by clicking the image icon on the top of the editor box.
– Novak
Jan 2 at 14:48
Apologies! It wouldn't let me because it was my first post
– JAA
Jan 2 at 16:07
add a comment |
Please don't link an images to your post. Instead, just embed the image to your question by clicking the image icon on the top of the editor box.
– Novak
Jan 2 at 14:48
Apologies! It wouldn't let me because it was my first post
– JAA
Jan 2 at 16:07
Please don't link an images to your post. Instead, just embed the image to your question by clicking the image icon on the top of the editor box.
– Novak
Jan 2 at 14:48
Please don't link an images to your post. Instead, just embed the image to your question by clicking the image icon on the top of the editor box.
– Novak
Jan 2 at 14:48
Apologies! It wouldn't let me because it was my first post
– JAA
Jan 2 at 16:07
Apologies! It wouldn't let me because it was my first post
– JAA
Jan 2 at 16:07
add a comment |
1 Answer
1
active
oldest
votes
It is expected. The built-in Azure Function action uses the complete URL of Http trigger hence we don't need to worry about the authentication. It's all by design because once we are able to find the Azure Functions in the logic app(which locates in the same subscription), which means we have access to them.
If you want to provide authentication key by yourself, you could use Http action instead.
answered Jan 3 at 2:10
Jerry LiuJerry Liu
11.5k11334
Thanks Jerry! I thought as much, but haven't seen any documentation or resource to confirm this :)
– JAA
Jan 3 at 10:50
@JAA Yeah, don't see any doc either. I think this behavior is exactly what logic app want to offer. We only need to call the Azure Function to process, we don't need to care about the settings which are configured in Azure Function itself outside logic app. Anyway, it's always good to get rid of confusion. Could you accept the answer to close your question?
– Jerry Liu
Jan 3 at 14:34
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f54008304%2fdoes-should-azure-function-authorisation-apply-when-the-function-is-called-by-a%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
It is expected. The built-in Azure Function action uses the complete URL of Http trigger hence we don't need to worry about the authentication. It's all by design because once we are able to find the Azure Functions in the logic app(which locates in the same subscription), which means we have access to them.
If you want to provide authentication key by yourself, you could use Http action instead.
answered Jan 3 at 2:10
Jerry LiuJerry Liu
11.5k11334
Thanks Jerry! I thought as much, but haven't seen any documentation or resource to confirm this :)
– JAA
Jan 3 at 10:50
@JAA Yeah, don't see any doc either. I think this behavior is exactly what logic app want to offer. We only need to call the Azure Function to process, we don't need to care about the settings which are configured in Azure Function itself outside logic app. Anyway, it's always good to get rid of confusion. Could you accept the answer to close your question?
– Jerry Liu
Jan 3 at 14:34
add a comment |
It is expected. The built-in Azure Function action uses the complete URL of Http trigger hence we don't need to worry about the authentication. It's all by design because once we are able to find the Azure Functions in the logic app(which locates in the same subscription), which means we have access to them.
If you want to provide authentication key by yourself, you could use Http action instead.
answered Jan 3 at 2:10
Jerry LiuJerry Liu
11.5k11334
Thanks Jerry! I thought as much, but haven't seen any documentation or resource to confirm this :)
– JAA
Jan 3 at 10:50
@JAA Yeah, don't see any doc either. I think this behavior is exactly what logic app want to offer. We only need to call the Azure Function to process, we don't need to care about the settings which are configured in Azure Function itself outside logic app. Anyway, it's always good to get rid of confusion. Could you accept the answer to close your question?
– Jerry Liu
Jan 3 at 14:34
add a comment |
It is expected. The built-in Azure Function action uses the complete URL of Http trigger hence we don't need to worry about the authentication. It's all by design because once we are able to find the Azure Functions in the logic app(which locates in the same subscription), which means we have access to them.
If you want to provide authentication key by yourself, you could use Http action instead.
answered Jan 3 at 2:10
Jerry LiuJerry Liu
11.5k11334
It is expected. The built-in Azure Function action uses the complete URL of Http trigger hence we don't need to worry about the authentication. It's all by design because once we are able to find the Azure Functions in the logic app(which locates in the same subscription), which means we have access to them.
If you want to provide authentication key by yourself, you could use Http action instead.
answered Jan 3 at 2:10
Jerry LiuJerry Liu
11.5k11334
answered Jan 3 at 2:10
Jerry LiuJerry Liu
11.5k11334
answered Jan 3 at 2:10
Jerry LiuJerry Liu
11.5k11334
answered Jan 3 at 2:10
Jerry LiuJerry Liu
11.5k11334
11.5k11334
Thanks Jerry! I thought as much, but haven't seen any documentation or resource to confirm this :)
– JAA
Jan 3 at 10:50
@JAA Yeah, don't see any doc either. I think this behavior is exactly what logic app want to offer. We only need to call the Azure Function to process, we don't need to care about the settings which are configured in Azure Function itself outside logic app. Anyway, it's always good to get rid of confusion. Could you accept the answer to close your question?
– Jerry Liu
Jan 3 at 14:34
add a comment |
Thanks Jerry! I thought as much, but haven't seen any documentation or resource to confirm this :)
– JAA
Jan 3 at 10:50
@JAA Yeah, don't see any doc either. I think this behavior is exactly what logic app want to offer. We only need to call the Azure Function to process, we don't need to care about the settings which are configured in Azure Function itself outside logic app. Anyway, it's always good to get rid of confusion. Could you accept the answer to close your question?
– Jerry Liu
Jan 3 at 14:34
Thanks Jerry! I thought as much, but haven't seen any documentation or resource to confirm this :)
– JAA
Jan 3 at 10:50
Thanks Jerry! I thought as much, but haven't seen any documentation or resource to confirm this :)
– JAA
Jan 3 at 10:50
@JAA Yeah, don't see any doc either. I think this behavior is exactly what logic app want to offer. We only need to call the Azure Function to process, we don't need to care about the settings which are configured in Azure Function itself outside logic app. Anyway, it's always good to get rid of confusion. Could you accept the answer to close your question?
– Jerry Liu
Jan 3 at 14:34
@JAA Yeah, don't see any doc either. I think this behavior is exactly what logic app want to offer. We only need to call the Azure Function to process, we don't need to care about the settings which are configured in Azure Function itself outside logic app. Anyway, it's always good to get rid of confusion. Could you accept the answer to close your question?
– Jerry Liu
Jan 3 at 14:34
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f54008304%2fdoes-should-azure-function-authorisation-apply-when-the-function-is-called-by-a%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Please don't link an images to your post. Instead, just embed the image to your question by clicking the image icon on the top of the editor box.
– Novak
Jan 2 at 14:48
Apologies! It wouldn't let me because it was my first post
– JAA
Jan 2 at 16:07