@microsoft.graph.downloadUrl retuns 403 FORBIDDEN

I got the response for @microsoft.graph.downloadUrl . and got a download URL look like the one below.

https://developertcs.sharepoint.com/sites/test/_layouts/15/download.aspx?UniqueId=528531ac-15ac-4add-976a-056b2a16cb8e&Translate=false&tempauth=eyJ0eXAiOiJKV1QiLCJhbGciOiJub25lIn0.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.MnVvbmZBcGpiRURWTS9yOUl2MThrT0xkcnY0MFZGOEJ4dFZVZTZXY2lyYz0&ApiVersion=2.0

I am making Raw HTTP request of above url and getting 403 Forbidden as a response

4 Replies

Know the answer? Post it — somebody with the same question will find it here.

Nanddeep Nachan8y ago
In the RequestHeaders, try passing below parameters:
Accept="application/json;odata=verbose"
Content-Type="application/json;odata=verbose"
Authorization=""
Vinodh Narayanan8y ago
Dear,

Please use the below url to work on graph api,

1.Fetch acess token

https://www.c-sharpcorner.com/article/getting-started-with-microsoft-graph-api/

Regards
Vinodh narayanan
Pethu Raj8y ago
It's an issue at Microsoft's end.. they listed the issue as one of the service degradation under Advisories.
Chanakya Jayabalan8y ago
Looks like the token is reqired to access the url as you are getting 403 error. Did you check if the URL is opening in a browser where you have logged in to your site.