Static-web-apps: Cannot Deploy - azure_static_web_apps_api_token provided was invalid.

[m-sterspace]

I'm currently unable to deploy the latest changes to my app.

As of at least last night as of 11pm and continuing this morning, I'm unable to deploy my web app as my github actions fails to build:

azure_static_web_apps_api_token provided was invalid.

I double checked my git repo and nothing about my actions files (including the api tokens) have changed since my last successful build so I don't know what's going on?

[miwebst]

Interesting....when was the last time you successfully deployed?

We are working on adding the ability to get/reset your api token via the portal.
Can you try getting your api token via az cli like so?

az rest --method post --url /subscriptions/_{/resourceGroups//providers/Microsoft.Web/staticSites//listsecrets?api-version=2020-06-01}

Then you can update the GH secret and see if that fixes things.

[m-sterspace]

Last successful build was October 19th, 9:56am EST

I'll give the token reset a shot and let you know how it goes

[m-sterspace]

Hmmm, tried resetting the token via the cli but I'm getting the following error:
Method Not Allowed({"error":{"code":"HttpMethodIsNotSupported","message":"The HTTP method 'POST' is not supported."}})

[miwebst]

Ah sorry, looks like the GitHub comment parsed the url I provided above. Let me try it again. Looks like you are missing the name of the static web app. You need to fill in the []'s:

url: /subscriptions/[subName]/resourceGroups/[rgName]/providers/Microsoft.Web/staticSites/[staticWebAppName]/listsecrets?api-version=2020-06-01

[m-sterspace]

Ah, I had caught the resourceGroup and subscription but missed the web app name. Updated the command and got the intended response:

When I went to paste the key into my repo's secrets I noticed that it had been changed 7 days ago, and the logs (and an instant message) confirmed that my colleague had messed with the secret.

That being said, while the build is progressing all the way through now (instead of exiting immediately), at the end it's hitting an error when it goes to deploy to the hosting provider and I'm not quite sure why:

The content server has rejected the request with: BadRequest

Reason: No matching static site was found or the api key was invalid.

I double checked that it's the same "apiKey" returned by the az cli command. Do I need to include apiKey= or something like that?

[miwebst]

Interesting, did the name of the branch or repository change relative to the details that are showing up in portal? We made some changes a little while ago to break the dependency but if those do not match then you may need to reset your api token to get this to work again.

[m-sterspace]

Hmm, no, I don't believe they've changed, it's still our develop branch and the repo name hasn't changed. Some work was done in feature branches that was then merged back into develop but that's about it. How would I go about resetting the api token?

[miwebst]

You should be able to call an api like this:

az rest --method post --url /subscriptions/[subName]/resourceGroups/[rgName]/providers/Microsoft.Web/staticSites/[staticWebAppName]/resetapikey?api-version=2020-06-01 --body "{\"location\": \"centralus\", \"properties\": {}}"

Then you can use the list api to get the new token and update it in GH. We are working on making this experience better.

[m-sterspace]

Hmm, that didn't seem to quite work.

When I tried initially I got an error that it was missing the Content-Type header and couldn't decode as an octet stream:

So I explicitly set the Content-Type header to application/json and I'm now getting the following error:

Bad Request({"Code":"BadRequest","Message":"Parameter resetPropertiesEnvelope is null or empty.","Target":null,"Details":[{"Message":"Parameter resetPropertiesEnvelope is null or empty."},{"Code":"BadRequest"},{"ErrorEntity":{"ExtendedCode":"51011","MessageTemplate":"Parameter {0} is null or empty.","Parameters":["resetPropertiesEnvelope"],"Code":"BadRequest","Message":"Parameter resetPropertiesEnvelope is null or empty."}}],"Innererror":null})

[miwebst]

So this works for me in the same region as your static web app so hopefully should also work for you! I'm not using powershell but using cmd, which is probably why my escape characters look different. Can you try cmd as well with these escape characters?

az rest --method post --url /subscriptions/[sub]/resourcegroups/[rg]/providers/Microsoft.Web/staticSites/[swa name]/resetapikey?api-version=2020-06-01 --body "{\"location\": \"centralus\", \"properties\": {}}"

[m-sterspace]

You were right, completely my mistake, I didn't realize that you had to escape with both a backtick and a backslash in powershell, it worked perfectly when I used cmd as well as when I went back to ps and escaped properly. Thanks a ton for all your help!

CMD

az rest --method post --url /subscriptions/[subscriptionId]/resourcegroups/[resourceGroupName]/providers/Microsoft.Web/staticSites/[staticSiteName]/resetapikey?api-version=2020-06-01 --body "{\"location\": \"centralus\", \"properties\": {}}"

az rest --method post --url /subscriptions/[subscriptionId]/resourcegroups/[resourceGroupName]/providers/Microsoft.Web/staticSites/[staticSiteName]/listsecrets?api-version=2020-06-01

Powershell

az rest --method post --url /subscriptions/[subscriptionId]/resourcegroups/[resourceGroupName]/providers/Microsoft.Web/staticSites/[staticSiteName]/resetapikey?api-version=2020-06-01 --body "{\`"location\`": \`"centralus\`", \`"properties\`": {}}"

az rest --method post --url /subscriptions/[subscriptionId]/resourcegroups/[resourceGroupName]/providers/Microsoft.Web/staticSites/[staticSiteName]/listsecrets?api-version=2020-06-01