How to write a python script to authenticate to Azure DevOps REST API and get the access token?

Question

How can I authenticate to Azure DevOps REST API in a python script? I found that there are 2 methods :

Using personal access token (PAT)
Using OAuth 2.0

I am using the second method. Followed the steps in this documentation: https://learn.microsoft.com/en-us/azure/devops/integrate/get-started/authentication/oauth?view=azure-devops

I wrote this function to autherize to azure DevOps using OAuth 2.0:

def get_authenticated():

    client_id = < my client ID as a string >
    state = "user1"
    scope = "vso.graph_manage%20vso.identity_manage%20vso.profile_write%20vso.project_manage%20vso.tokenadministration%20vso.tokens"
    callback_URL = < Callback URL to my azure devops account >

    # Azure DevOps Services authorization endpoint
    Auth_URL = "https://app.vssps.visualstudio.com/oauth2/authorize?client_id=" + client_id + "&response_type=Assertion&state=" + state + "&scope=" + scope + "&redirect_uri=" + callback_URL
    headers = {'Accept': 'application/json;api-version=1.0'}

    print(Auth_URL)

    response = requests.get(Auth_URL,headers = headers)
    print(response)
    print(response.status_code)
    print(response.headers['content-type'])

    response.raise_for_status()

But when calling this function, output I am getting is:

<Response [203]>
203
text/html; charset=utf-8

The auth URL is correct because when I tried to access the same URL in a browser it successfully redirects to a form to enter azure user credentials.

The expected behavior of the script is, when the auth_url is requested, Azure DevOps Services should ask the user to authorize. I think that should be done by prompting for username&password in terminal/via a browser.

I am totally new to python scripting and REST APIs. Can someone help me by pointing out the faults in my code or pointing to some samples?

Hi, did you get a solution to this question?

PKen
– PKen

2021-08-11 16:06:19 +00:00
Commented Aug 11, 2021 at 16:06 — PKen
– PKen, Commented Aug 11, 2021 at 16:06

Lu Mike · Accepted Answer · 2019-06-18 08:15:49Z

0

The http error 203 indicates that the returned metainformation is not a definitive set of the object from a server with a copy of the object, but is from a private overlaid web. In your code,you added headers = {'Accept': 'application/json;api-version=1.0'}, but in fact the content type should be application/x-www-form-urlencoded.

You can use some OAuth2 library for python to authenticate to Azure DevOps REST API, such as OAuthLib. It includes sevelral samples.

Also, you can refer to following topic, hope it is helpful for you.

Tutorial for using requests_oauth2

edited Jun 18, 2019 at 8:15

answered Jun 18, 2019 at 8:06

Lu Mike

7054 silver badges4 bronze badges

Sign up to request clarification or add additional context in comments.

8 Comments

AnjK Over a year ago

I tried with the header you suggested. But the same error occurred.

AnjK Over a year ago

can I pass personal access token (PAT) directly via header to access the azure-devops REST API?

Lu Mike Over a year ago

@AnjanaDyna, you can not pass personal access token (PAT) directly via header to access the azure-devops REST API. If you want to use PAT authentication, you can refer to this link.

AnjK Over a year ago

I tried it. The authentication was successful with that method, for sure. But i was not able to use the python client api to create a new user in azure-devops. I posted it as a question here :stackoverflow.com/questions/56591886/… . Could you plaese help me?

Lu Mike Over a year ago

You may try to remove the headers = {'Accept': 'application/json;api-version=1.0'}, using default instead.

|

Collectives™ on Stack Overflow

How to write a python script to authenticate to Azure DevOps REST API and get the access token?

1 Answer 1

8 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

8 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related