Update SharePoint List Item using Microsoft Graph API

Question

We are trying to update fields of a ListItem using Microsoft Graph.

When we use the PATCH command in the Graph Explorer, everything works. However as soon as we want to try the same using JSON in C#, it throws back a Bad Request at us.

Below is the request that I am sending to Graph Explorer for updating the field:

PATCH https://graph.microsoft.com/v1.0/sites/mysharepoint:/sites/mySite:/lists/myList/items/1582/fields`
Content-type: application/json

{"CaseNumber": "13XX17101310238"}

The code we are trying to execute is:

string addItemJsonString = "{\"CaseNumber\":\"13XX17101310238\"}";
string requestUrl = sharepointURL + "/sites/mySharepointSiteID/lists/myList/items/1315/fields";

HttpClient client = new HttpClient();

HttpRequestMessage message = new HttpRequestMessage(new HttpMethod("PATCH"), requestUrl);
message.Headers.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
message.Headers.Authorization = new AuthenticationHeaderValue("Bearer", accessToken);
message.Content = new StringContent(addItemJsonString);

HttpResponseMessage response = await client.SendAsync(message);

The request message that gets sent is

Method: PATCH, 
RequestUri: 'https://graph.microsoft.com/v1.0/sites/mySite:/sites/hha:/lists/myList/items/1584/fields', 
Version: 2.0, 
Content: System.Net.Http.StringContent, 
Headers:{  
    Accept: application/json  
    Authorization: Bearer eyJ0eXAiOiJKV1QiLCJub25jZSI6IkFRQUJBQUFBQUFCSGg0a21TX2FLVDVYcmp6eFJBdEh6Z3M3NHRlVmt2WEZiVF9lS21lR21sbk9jdlV5bnNFdEIwWGc0c2p3TUdNQTQ2NnNGRklUbXFSMjJVYWNRc1NlWVdOX1d0cXo3aFp2ZVd5MkZsZTAyenlBQSIsImFsZyI6IlJTMjU2IiwieDV0IjoiRlNpbXVGckZOb0Mwc0pYR212MTNuTlpjZURjIiwia2lkIjoiRlNpbXVGckZOb0Mwc0pYR212MTNuTlpjZURjIn0.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.eUDL7Kn6NwFRk8vOYegoAPT4HSMW2zsjlrxBHGN2o1HUk7GldCbq3ket76eW6LKChNjKgilLktB13pdC-Us5tFrQIBTxbSYnSeKFy2Jtz1aUxMtqAxD2eXcZGjE44KqUf40agD_-eqMTmDy4vSbxUEvsacin8RlSwMd94cOuxrCz3eSpdWfpsJiqsd2tkg7i7EkA9hRE9xHEyVlQR8KLzyt1Zxvoh-RyCfzKqeEfhuBUcRdgdXxx2kgqrJI1Zv7NckslDs2dc4FcZ_JhgCFc0Hzmtqq9FrwQ-1IekMG2T8Gjkb-wzNu0qwKm3ZtMPReMKQkDu61Bx-00OKu02DFO3g  
    Content-Type: text/plain; 
    charset=utf-8  
    Content-Length: 32}
}

The response that we get back is

StatusCode: 400, 
ReasonPhrase: 'Bad Request', 
Version: 1.1, 
Content: System.Net.Http.StreamContent, 
Headers:{  
    client-request-id: c0d1f2c4-e586-4094-9367-ed527dd28896  
    Strict-Transport-Security: max-age=31536000  
    request-id: c0d1f2c4-e586-4094-9367-ed527dd28896  
    Transfer-Encoding: chunked  
    x-ms-ags-diagnostic: {"ServerInfo":{"DataCenter":"SouthEast Asia","Slice":"SliceA","Ring":"3","ScaleUnit":"002","Host":"AGSFE_IN_10","ADSiteName":"SIN"}}  
    Duration: 2632.4966  
    Cache-Control: private  
    Date: Tue, 27 Mar 2018 12:23:49 GMT 
    Content-Type: application/json
    }

And the response header says

client-request-id: c0d1f2c4-e586-4094-9367-ed527dd28896
Strict-Transport-Security: max-age=31536000
request-id: c0d1f2c4-e586-4094-9367-ed527dd28896
Transfer-Encoding: chunked
x-ms-ags-diagnostic: {"ServerInfo":{"DataCenter":"SouthEast Asia","Slice":"SliceA","Ring":"3","ScaleUnit":"002","Host":"AGSFE_IN_10","ADSiteName":"SIN"}}
Duration: 2632.4966
Cache-Control: private
Date: Tue, 27 Mar 2018 12:23:49 GMT

Any idea where are we losing it?

What is the actual error message that you're getting back? Also, what is the value of sharepointURL and accessToken? — Marc LaFleur
– Marc LaFleur, Commented Mar 26, 2018 at 16:37
@Marc sharepointURL contains the leading generic part of graph request up until /sites. The accessToken is the AAD token we get. The response we get is generic 400 Bad Request. We tried doing an expand using the same url and access token for the same list item and we got a successful response. However the PATCH seems to have some issues. — Muhammad Khurram Bhatti
– Muhammad Khurram Bhatti, Commented Mar 26, 2018 at 16:48
The error will have several pieces of information, it's a JSON response with a correlation id, error code, and message. 400 Bad Request isn't enough to go on. And I was specifically asking for the values of accessToken and sharepointURL. One or both are likely wrong. — Marc LaFleur
– Marc LaFleur, Commented Mar 26, 2018 at 17:26
@marc The value of the sharepointurl variable is " graph.microsoft.com/v1.0". I can paste the access token but it is freaky long and will consume the comment space here. Both the variable and access token are valid though because the same code works if I change the method from PATCH to Get and just do an Expand on the same list item I am trying to modify. The response I get back I am adding in the original post because of the space issue here in the comments. — Muhammad Khurram Bhatti
– Muhammad Khurram Bhatti, Commented Mar 27, 2018 at 12:28
Thanks for the headers, they're helpful. What I was really looking for is the body however. It contains a JSON description that should tell you exactly why it was a "bad request". — Marc LaFleur
– Marc LaFleur, Commented Mar 27, 2018 at 15:01

Marc LaFleur · Accepted Answer · 2018-03-27 15:09:43Z

2

Your problem here is you're issuing the PATCH with a Content-Type of txt\plain. It should be application/json.

You need to change this line:

message.Content = new StringContent(addItemJsonString);

to:

message.Content = new StringContent(addItemJsonString, Encoding.UTF8, "application/json");

answered Mar 27, 2018 at 15:09

Marc LaFleur

33.4k4 gold badges41 silver badges71 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Muhammad Khurram Bhatti Over a year ago

Thanks a lot @marc my friend. That solved it for us. Much appreciated :)

Marc LaFleur Over a year ago

Glad it helps. Please make sure you mark answers on Stack Overflow that work for you as answered. It lets future readers know what worked and what didn't.

Collectives™ on Stack Overflow

Update SharePoint List Item using Microsoft Graph API

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related