I am trying to configure my Server (hosted by Azure AKS and proxied by API management service, using Azure-AD Oauth-Flow authentication) to receive cloud events like "connected" and "disconnected" by Azure Web PubSub. Either if I configure user assigned managed identity in Web PubSub, or system assigned managed identity with our default AAD, I am getting undocumented error in Web PubSub Live Trace Tool when receiving connected/disconnected events: Event Name: AbuseProtectionResponseFailed Message: Abuse protection validation for 'https://api..../.../.../webpubsub/eventhandler/validate' failed. Exception: Failed to get authentication header. How to solve it? More info: I don't want to expose https://api..../.../.../webpubsub/eventhandler/validate without authentication. It's not secure enough I don't want to use Event Listener with Event Hub, because its in Preview and I don't want to provision a new Event Hub Nothing is logged by APIM and by the POD => means Azure Web PubSub has the problem before invoking the validate method I can call the OPTIONS validate method directly through APIM with Swagger and I am getting 200 If called with Swagger the method responds with both of headers: WebHook-Allowed-Origin: * WebHook-Allowed-Rate: * Everything else works fine: Client Protocol: OK Server Protocol - Connection Manager: OK

How to solve AbuseProtectionResponseFailed in Azure Web PubSub - server protocol - event handler?

Stoev Andrey Zahariev 10

I am trying to configure my Server (hosted by Azure AKS and proxied by API management service, using Azure-AD Oauth-Flow authentication) to receive cloud events like "connected" and "disconnected" by Azure Web PubSub. Either if I configure user assigned managed identity in Web PubSub, or system assigned managed identity with our default AAD, I am getting undocumented error in Web PubSub Live Trace Tool when receiving connected/disconnected events:

Event Name: AbuseProtectionResponseFailed
Message: Abuse protection validation for 'https://api..../.../.../webpubsub/eventhandler/validate' failed.
Exception: Failed to get authentication header.

How to solve it?

More info:

I don't want to expose https://api..../.../.../webpubsub/eventhandler/validate without authentication. It's not secure enough
I don't want to use Event Listener with Event Hub, because its in Preview and I don't want to provision a new Event Hub
Nothing is logged by APIM and by the POD => means Azure Web PubSub has the problem before invoking the validate method
I can call the OPTIONS validate method directly through APIM with Swagger and I am getting 200
If called with Swagger the method responds with both of headers: WebHook-Allowed-Origin: * WebHook-Allowed-Rate: *
Everything else works fine:

Client Protocol: OK
Server Protocol - Connection Manager: OK

Grmacjon-MSFT 18,646 Reputation points

2023-07-27T22:50:59.75+00:00

Hi @Stoev Andrey Zahariev , thanks for the question. We are checking internally with the engineering team to see if this is a known issue and will get back to you when we hear back from them.

Best,

Grace
Rafael Miranda 0 Reputation points

2024-07-11T16:50:11.4433333+00:00

Getting the same error with the same behavior. Did you solve it?
JeffersonIMHANZENOBE-2389 0 Reputation points

2024-09-20T10:19:29.6066667+00:00

I have a similar issue. We have the event handler behind an Azure Application Gateway. We get an error "The SSL connection could not be established, see inner exception." No logs in the App gateway which means Azure Web PubSub has the problem before invoking the validate method. Also, if I call the OPTIONS method directly with swagger or curl, I get a successful 200 status with WebHook-Allowed-Origin header set to *.

Did you manage to solve this?
Stewart Armbrecht (BBB) 0 Reputation points

2024-11-08T01:54:55.85+00:00

Was there a resolution for this? I'm getting this error as well.

Share via

How to solve AbuseProtectionResponseFailed in Azure Web PubSub - server protocol - event handler?

Your answer