const { AuthConfig } = require('node-sp-auth-config');
const { create } = require('sp-request');
(async () => {
const { siteUrl, authOptions } = await new AuthConfig().getContext();
const spr = create(authOptions);
const digest = await spr.requestDigest(`${siteUrl}`);
const res = await spr.post(`${siteUrl}/_api/web/lists/getByTitle('MyList')/items(1)`, {
headers: {
'X-RequestDigest': digest,
'X-HTTP-Method': 'DELETE',
'IF-MATCH': '*'
}
});
console.log(res.statusCode, res.statusMessage);
})().catch(console.warn);
console.log(url);
const headers = {
'X-RequestDigest': digest,
'X-HTTP-Method': 'DELETE',
'IF-MATCH': '*'
};
spr.get(url).then(response => {
let deleteUrl =
${site}/_api/web/lists/getByTitle('Holiday')/items(${response.body.d.results[0].ID}); spr.post(deleteUrl, { headers }).then(response => {
console.log(response.statusCode);
})
Here is my code:
https://i.imgur.com/snN1kyE.png
Looks that the environment's strategy is not NTLM but something else.
The simplest way to troubleshoot is https://github.com/koltyakov/node-sp-auth-troubleshoot
Access to XMLHttpRequest at 'https://waconafd.officeapps.live.com/apc/trans.gif?b320ab775852cec633df8395c6a55814' from origin 'https://abcd.sharepoint.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.
2 replies
{"error":{"code":"-2147024891, System.UnauthorizedAccessException".....}
Here you have the script in case you want to test it from chrome: var reqUrl= "https://XXXX.sharepoint.com/_api/web/siteusers/getbyid(170)";
var body={ '__metadata':{ 'type': 'SP.Data.UserInfoItem' }, 'Title':'Active3','EMail': 'xxxx@xxx.es' }
var _payloadOptions = {
method: "POST",
body: undefined,
headers: {
credentials: "include",
Accept: "application/json; odata=verbose",
"Content-Type": "application/json; odata=verbose"
}
};
//Get RequestDigest First
fetch("https://XXXX.sharepoint.com/_api/contextinfo",_payloadOptions).then(r=>r.json())
.then(r=>
{
_payloadOptions.headers["X-RequestDigest"]=r.d.GetContextWebInformation.FormDigestValue
_payloadOptions.headers["IF-MATCH"]="*"
_payloadOptions.body=JSON.stringify(body);
_payloadOptions.method="MERGE";
// Make REST API Call to update list item without increamenting version.
fetch(reqUrl
,_payloadOptions).then(function(r){
console.log(r)
}
).then(r=>console.log(r))
})
