docs: explain Teams API limitation for message deletion
- Microsoft Teams Graph API does not support DELETE on channel messages - This is a platform limitation, not an application error - Updated UI to show clear warning about Teams API limitation - Updated error messages to guide users on alternatives: - Delete via Teams client UI - Use delegated token with ChatMessage.ReadWrite.All permission - HTTP 405 (Method Not Allowed) is the expected response from Graph API
This commit is contained in:
@@ -0,0 +1,349 @@
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
||||
<title>Teams Channel Messages</title>
|
||||
<script src="https://cdn.tailwindcss.com"></script>
|
||||
<script>
|
||||
tailwind.config = {
|
||||
theme: { extend: { colors: { primary: '#4c51bf', secondary: '#5b21b6' } } }
|
||||
}
|
||||
</script>
|
||||
</head>
|
||||
<body class="min-h-screen bg-gray-50">
|
||||
<div class="max-w-5xl mx-auto p-4 sm:p-6">
|
||||
<div class="flex items-center justify-between mb-4">
|
||||
<h1 class="text-2xl font-bold text-gray-800">Teams Channel Messages</h1>
|
||||
<a href="/index.html" class="text-sm text-blue-600 underline">Back to Form</a>
|
||||
</div>
|
||||
|
||||
<!-- Info about Teams API Limitation -->
|
||||
<div class="mb-4 p-3 bg-yellow-50 border border-yellow-200 rounded-lg text-sm text-yellow-800">
|
||||
<strong>⚠️ Note:</strong> Microsoft Teams API does not support deletion of channel messages via REST API.
|
||||
To delete messages, either:
|
||||
<ul class="ml-4 mt-2 space-y-1">
|
||||
<li>• Delete directly in Teams (right-click message → Delete)</li>
|
||||
<li>• Provide a delegated user token with <code class="bg-yellow-100 px-1 rounded">ChatMessage.ReadWrite.All</code> permission</li>
|
||||
</ul>
|
||||
</div>
|
||||
|
||||
<!-- Controls -->
|
||||
<div class="bg-white rounded-xl shadow p-4 mb-4">
|
||||
<div class="grid grid-cols-1 sm:grid-cols-2 gap-4">
|
||||
<div>
|
||||
<label class="block text-sm font-medium text-gray-700 mb-1">Team ID</label>
|
||||
<input id="teamId" type="text" placeholder="e.g. e45f..." class="w-full px-3 py-2 border rounded-lg" />
|
||||
</div>
|
||||
<div>
|
||||
<label class="block text-sm font-medium text-gray-700 mb-1">Channel ID</label>
|
||||
<input id="channelId" type="text" placeholder="e.g. 19:...@thread.tacv2" class="w-full px-3 py-2 border rounded-lg" />
|
||||
</div>
|
||||
</div>
|
||||
<div class="grid grid-cols-1 sm:grid-cols-3 gap-4 mt-4">
|
||||
<div>
|
||||
<label class="block text-sm font-medium text-gray-700 mb-1">Bearer Token (optional)</label>
|
||||
<input id="bearerToken" type="text" placeholder="Paste delegated token if needed" class="w-full px-3 py-2 border rounded-lg" />
|
||||
</div>
|
||||
<div>
|
||||
<label class="block text-sm font-medium text-gray-700 mb-1">Max Results</label>
|
||||
<input id="top" type="number" min="1" max="50" value="50" class="w-full px-3 py-2 border rounded-lg" />
|
||||
</div>
|
||||
<div class="flex items-end">
|
||||
<button id="loadBtn" class="w-full py-2 bg-primary text-white rounded-lg hover:opacity-95">Load Messages</button>
|
||||
</div>
|
||||
</div>
|
||||
<div id="status" class="mt-3 text-sm text-gray-600"></div>
|
||||
</div>
|
||||
|
||||
<!-- Actions -->
|
||||
<div class="flex items-center gap-2 mb-3">
|
||||
<button id="selectAllBtn" class="px-3 py-2 bg-gray-200 rounded-lg text-sm">Select All</button>
|
||||
<button id="clearSelectionBtn" class="px-3 py-2 bg-gray-200 rounded-lg text-sm">Clear</button>
|
||||
<button id="deleteSelectedBtn" class="px-3 py-2 bg-red-600 text-white rounded-lg text-sm">Delete Selected</button>
|
||||
<span id="deleteSummary" class="ml-2 text-sm text-gray-600"></span>
|
||||
<div class="ml-auto flex items-center gap-2">
|
||||
<label class="text-sm text-gray-700">
|
||||
<input id="toggleRaw" type="checkbox" class="mr-1 align-middle" /> Show raw message JSON
|
||||
</label>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- Messages List -->
|
||||
<div id="messagesContainer" class="bg-white rounded-xl shadow divide-y"></div>
|
||||
</div>
|
||||
|
||||
<script>
|
||||
const teamIdEl = document.getElementById('teamId');
|
||||
const channelIdEl = document.getElementById('channelId');
|
||||
const bearerEl = document.getElementById('bearerToken');
|
||||
const topEl = document.getElementById('top');
|
||||
const loadBtn = document.getElementById('loadBtn');
|
||||
const statusEl = document.getElementById('status');
|
||||
const messagesContainer = document.getElementById('messagesContainer');
|
||||
const selectAllBtn = document.getElementById('selectAllBtn');
|
||||
const clearSelectionBtn = document.getElementById('clearSelectionBtn');
|
||||
const deleteSelectedBtn = document.getElementById('deleteSelectedBtn');
|
||||
const deleteSummaryEl = document.getElementById('deleteSummary');
|
||||
|
||||
// Helper: URL params
|
||||
function getParams() {
|
||||
const u = new URL(window.location.href);
|
||||
const p = Object.fromEntries(u.searchParams.entries());
|
||||
return p;
|
||||
}
|
||||
|
||||
// Pre-fill from last-used IDs if available (from localStorage)
|
||||
const LS_KEYS = { team: 'teamsMsg.teamId', channel: 'teamsMsg.channelId', top: 'teamsMsg.top' };
|
||||
const params = getParams();
|
||||
teamIdEl.value = params.teamId || localStorage.getItem(LS_KEYS.team) || '';
|
||||
channelIdEl.value = params.channelId || localStorage.getItem(LS_KEYS.channel) || '';
|
||||
topEl.value = params.top || localStorage.getItem(LS_KEYS.top) || '50';
|
||||
|
||||
function savePrefs() {
|
||||
localStorage.setItem(LS_KEYS.team, teamIdEl.value.trim());
|
||||
localStorage.setItem(LS_KEYS.channel, channelIdEl.value.trim());
|
||||
localStorage.setItem(LS_KEYS.top, topEl.value);
|
||||
}
|
||||
|
||||
function renderMessages(messages) {
|
||||
messagesContainer.innerHTML = '';
|
||||
if (!messages || !messages.length) {
|
||||
messagesContainer.innerHTML = '<div class="p-4 text-sm text-gray-600">No messages found.</div>';
|
||||
return;
|
||||
}
|
||||
messages.forEach((m) => {
|
||||
const row = document.createElement('div');
|
||||
row.className = 'p-4 flex gap-3 items-start';
|
||||
|
||||
const checkbox = document.createElement('input');
|
||||
checkbox.type = 'checkbox';
|
||||
checkbox.className = 'mt-1';
|
||||
checkbox.dataset.messageId = m.id;
|
||||
|
||||
const info = document.createElement('div');
|
||||
info.className = 'flex-1';
|
||||
|
||||
const header = document.createElement('div');
|
||||
header.className = 'flex flex-wrap items-center gap-2 text-sm text-gray-700';
|
||||
const idEl = document.createElement('span');
|
||||
idEl.className = 'font-mono text-xs bg-gray-100 px-1 rounded';
|
||||
idEl.textContent = m.id;
|
||||
const timeEl = document.createElement('span');
|
||||
const dt = m.createdDateTime ? new Date(m.createdDateTime) : null;
|
||||
timeEl.textContent = dt ? dt.toLocaleString() : '';
|
||||
const fromEl = document.createElement('span');
|
||||
fromEl.textContent = m.from ? `by ${m.from}` : '';
|
||||
header.append(idEl, timeEl, fromEl);
|
||||
|
||||
const subjectEl = document.createElement('div');
|
||||
subjectEl.className = 'text-sm font-semibold';
|
||||
subjectEl.textContent = m.subject || m.summary || '';
|
||||
|
||||
// Extract and display Adaptive Card data prominently
|
||||
const cardWrap = document.createElement('div');
|
||||
if (Array.isArray(m.attachments) && m.attachments.length) {
|
||||
m.attachments.forEach(a => {
|
||||
if (a.contentType === 'application/vnd.microsoft.card.adaptive' && a.content) {
|
||||
try {
|
||||
const card = typeof a.content === 'string' ? JSON.parse(a.content) : a.content;
|
||||
const title = document.createElement('div');
|
||||
title.className = 'mt-2 text-xs font-semibold text-gray-700';
|
||||
title.textContent = 'Job Card Details';
|
||||
cardWrap.appendChild(title);
|
||||
|
||||
// Extract key text blocks from card body
|
||||
if (card.body && Array.isArray(card.body)) {
|
||||
card.body.forEach((section) => {
|
||||
if (section.type === 'Container' && Array.isArray(section.items)) {
|
||||
section.items.forEach((item) => {
|
||||
if (item.type === 'TextBlock' && item.text) {
|
||||
const textEl = document.createElement('div');
|
||||
textEl.className = 'text-sm text-gray-800 mt-1';
|
||||
textEl.textContent = item.text;
|
||||
cardWrap.appendChild(textEl);
|
||||
}
|
||||
});
|
||||
}
|
||||
});
|
||||
}
|
||||
|
||||
// Show full card JSON in a collapsed details element
|
||||
const cardDetails = document.createElement('details');
|
||||
cardDetails.className = 'mt-2';
|
||||
const cardSummary = document.createElement('summary');
|
||||
cardSummary.className = 'text-xs text-blue-700 cursor-pointer';
|
||||
cardSummary.textContent = 'Show full Adaptive Card JSON';
|
||||
const cardJsonPre = document.createElement('pre');
|
||||
cardJsonPre.className = 'mt-1 text-[10px] whitespace-pre-wrap bg-green-50 p-2 rounded border border-green-200';
|
||||
cardJsonPre.textContent = JSON.stringify(card, null, 2);
|
||||
cardDetails.append(cardSummary, cardJsonPre);
|
||||
cardWrap.appendChild(cardDetails);
|
||||
} catch (e) {
|
||||
// If not valid JSON, show raw content
|
||||
const att = document.createElement('div');
|
||||
att.className = 'mt-2 text-xs text-gray-700';
|
||||
att.textContent = `${a.contentType}`;
|
||||
cardWrap.appendChild(att);
|
||||
const pre = document.createElement('pre');
|
||||
pre.className = 'mt-1 text-[10px] whitespace-pre-wrap bg-green-50 p-2 rounded border border-green-200';
|
||||
pre.textContent = typeof a.content === 'string' ? a.content : JSON.stringify(a.content, null, 2);
|
||||
cardWrap.appendChild(pre);
|
||||
}
|
||||
}
|
||||
});
|
||||
}
|
||||
|
||||
// Body content (if present)
|
||||
const bodyWrap = document.createElement('div');
|
||||
if (m.bodyContent) {
|
||||
const bodyType = document.createElement('div');
|
||||
bodyType.className = 'text-[11px] text-gray-500 mt-2';
|
||||
bodyType.textContent = `Body Text (${m.bodyContentType || 'unknown'})`;
|
||||
const bodyText = document.createElement('div');
|
||||
bodyText.className = 'text-xs text-gray-800 whitespace-pre-wrap';
|
||||
// Derive plain text from HTML if needed
|
||||
const tmpDiv = document.createElement('div');
|
||||
tmpDiv.innerHTML = m.bodyContent || '';
|
||||
const plain = (m.bodyContentType === 'html') ? (tmpDiv.textContent || '') : (m.bodyContent || '');
|
||||
bodyText.textContent = plain;
|
||||
const bodyRaw = document.createElement('pre');
|
||||
bodyRaw.className = 'mt-1 text-[10px] whitespace-pre-wrap bg-gray-50 p-2 rounded';
|
||||
bodyRaw.textContent = m.bodyContent || '';
|
||||
bodyWrap.append(bodyType, bodyText, bodyRaw);
|
||||
}
|
||||
|
||||
// Raw JSON toggle for full fidelity (closed by default)
|
||||
const details = document.createElement('details');
|
||||
details.className = 'mt-2';
|
||||
const summary = document.createElement('summary');
|
||||
summary.className = 'text-xs text-blue-700 cursor-pointer';
|
||||
summary.textContent = 'Show raw message JSON';
|
||||
const rawPre = document.createElement('pre');
|
||||
rawPre.className = 'mt-1 text-[10px] whitespace-pre-wrap bg-gray-100 p-2 rounded';
|
||||
rawPre.textContent = JSON.stringify(m.raw || m, null, 2);
|
||||
details.append(summary, rawPre);
|
||||
|
||||
// Keep raw JSON closed by default
|
||||
details.open = false;
|
||||
|
||||
info.append(header, subjectEl, cardWrap, bodyWrap, details);
|
||||
row.append(checkbox, info);
|
||||
messagesContainer.append(row);
|
||||
});
|
||||
|
||||
// Auto-select loaded messages if requested
|
||||
if (params.autoSelect === '1') {
|
||||
messagesContainer.querySelectorAll('input[type="checkbox"]').forEach(cb => cb.checked = true);
|
||||
}
|
||||
|
||||
// If ids param provided, select matching ones (comma or newline separated)
|
||||
if (params.ids) {
|
||||
const ids = params.ids.split(/[,\n\r\s]+/).filter(Boolean);
|
||||
const set = new Set(ids);
|
||||
messagesContainer.querySelectorAll('input[type="checkbox"]').forEach(cb => {
|
||||
if (set.has(cb.dataset.messageId)) cb.checked = true;
|
||||
});
|
||||
}
|
||||
}
|
||||
|
||||
async function loadMessages() {
|
||||
savePrefs();
|
||||
const teamId = teamIdEl.value.trim();
|
||||
const channelId = channelIdEl.value.trim();
|
||||
const top = Math.min(parseInt(topEl.value || '50', 10) || 50, 50);
|
||||
if (!teamId || !channelId) {
|
||||
statusEl.textContent = 'Enter Team ID and Channel ID.';
|
||||
return;
|
||||
}
|
||||
statusEl.textContent = 'Loading messages...';
|
||||
try {
|
||||
const url = `/api/teams/${encodeURIComponent(teamId)}/channels/${encodeURIComponent(channelId)}/messages?top=${top}`;
|
||||
const headers = {};
|
||||
const bearer = bearerEl.value.trim();
|
||||
if (bearer) headers['Authorization'] = `Bearer ${bearer}`;
|
||||
const resp = await fetch(url, { headers });
|
||||
const data = await resp.json();
|
||||
if (!data.success) throw new Error(data.message || 'Failed to fetch messages');
|
||||
renderMessages(data.messages);
|
||||
statusEl.textContent = `Loaded ${data.count} messages.`;
|
||||
} catch (err) {
|
||||
statusEl.textContent = `Error: ${err.message}`;
|
||||
}
|
||||
}
|
||||
|
||||
async function deleteSelected() {
|
||||
const teamId = teamIdEl.value.trim();
|
||||
const channelId = channelIdEl.value.trim();
|
||||
const checkboxes = messagesContainer.querySelectorAll('input[type="checkbox"]:checked');
|
||||
const ids = Array.from(checkboxes).map(cb => cb.dataset.messageId);
|
||||
if (!ids.length) {
|
||||
deleteSummaryEl.textContent = 'No messages selected.';
|
||||
return;
|
||||
}
|
||||
deleteSummaryEl.textContent = `Deleting ${ids.length}...`;
|
||||
let ok = 0, fail = 0, teamsLimitationHit = false;
|
||||
for (const id of ids) {
|
||||
try {
|
||||
const url = `/api/teams/${encodeURIComponent(teamId)}/channels/${encodeURIComponent(channelId)}/messages/${encodeURIComponent(id)}`;
|
||||
const headers = {};
|
||||
const bearer = bearerEl.value.trim();
|
||||
if (bearer) headers['Authorization'] = `Bearer ${bearer}`;
|
||||
const resp = await fetch(url, { method: 'DELETE', headers });
|
||||
const data = await resp.json();
|
||||
if (!data.success) {
|
||||
if (data.isTeamsLimitation) {
|
||||
teamsLimitationHit = true;
|
||||
}
|
||||
throw new Error(data.message || 'Delete failed');
|
||||
}
|
||||
ok++;
|
||||
} catch (e) {
|
||||
fail++;
|
||||
}
|
||||
}
|
||||
|
||||
let summary = `Deleted ${ok}, failed ${fail}.`;
|
||||
if (teamsLimitationHit) {
|
||||
summary += ` ⚠️ Note: Microsoft Teams API does not support deletion of channel messages via REST API. `;
|
||||
summary += `Please delete messages directly from Teams (right-click message → Delete). `;
|
||||
summary += `Alternatively, use a delegated user token with ChatMessage.ReadWrite.All permission.`;
|
||||
}
|
||||
deleteSummaryEl.textContent = summary;
|
||||
|
||||
// Only refresh if any deletions succeeded
|
||||
if (ok > 0) {
|
||||
await loadMessages();
|
||||
}
|
||||
}
|
||||
|
||||
loadBtn.addEventListener('click', loadMessages);
|
||||
selectAllBtn.addEventListener('click', () => {
|
||||
messagesContainer.querySelectorAll('input[type="checkbox"]').forEach(cb => cb.checked = true);
|
||||
});
|
||||
clearSelectionBtn.addEventListener('click', () => {
|
||||
messagesContainer.querySelectorAll('input[type="checkbox"]').forEach(cb => cb.checked = false);
|
||||
});
|
||||
deleteSelectedBtn.addEventListener('click', deleteSelected);
|
||||
|
||||
// Global raw JSON toggle
|
||||
document.getElementById('toggleRaw').addEventListener('change', (e) => {
|
||||
const open = e.target.checked;
|
||||
messagesContainer.querySelectorAll('details').forEach(d => {
|
||||
// Only toggle the raw message JSON details (the last details in each row), not card details
|
||||
if (d.querySelector('summary').textContent.includes('raw message JSON')) {
|
||||
d.open = open;
|
||||
}
|
||||
});
|
||||
});
|
||||
|
||||
// Auto-load when params present
|
||||
if (params.teamId && params.channelId) {
|
||||
// If top is present, ensure numeric cap 50
|
||||
const t = Math.min(parseInt(params.top || '50', 10) || 50, 50);
|
||||
topEl.value = String(t);
|
||||
loadMessages();
|
||||
}
|
||||
</script>
|
||||
</body>
|
||||
</html>
|
||||
@@ -4,6 +4,7 @@ import { serveStatic } from 'hono/bun';
|
||||
import { cors } from 'hono/cors';
|
||||
import PocketBase from 'pocketbase';
|
||||
import { Client } from '@microsoft/microsoft-graph-client';
|
||||
import { listTeamChannels, listChannelMessages, listTeamChannelsWithToken, listChannelMessagesWithToken, deleteChannelMessage, deleteChannelMessageWithToken } from './services/teams/messages.ts';
|
||||
import { mkdir, appendFile } from 'fs/promises';
|
||||
import { existsSync } from 'fs';
|
||||
import path from 'path';
|
||||
@@ -753,6 +754,88 @@ app.get('/api/health', (c) => {
|
||||
});
|
||||
});
|
||||
|
||||
// List channels in a Team (to obtain Channel IDs)
|
||||
app.get('/api/teams/:teamId/channels', async (c) => {
|
||||
const teamId = c.req.param('teamId');
|
||||
try {
|
||||
const authHeader = c.req.header('authorization') || c.req.header('Authorization');
|
||||
const bearer = authHeader?.startsWith('Bearer ') ? authHeader.slice(7) : null;
|
||||
const channels = bearer
|
||||
? await listTeamChannelsWithToken(teamId, bearer)
|
||||
: await listTeamChannels(teamId);
|
||||
return c.json({ success: true, teamId, channels });
|
||||
} catch (err: any) {
|
||||
console.error('⚠️ Failed to list channels:', err);
|
||||
await logError('Graph List Channels', err, { teamId });
|
||||
return c.json({ success: false, message: err.message || 'Failed to list channels' }, 500);
|
||||
}
|
||||
});
|
||||
|
||||
// List messages in a channel (to obtain message IDs)
|
||||
app.get('/api/teams/:teamId/channels/:channelId/messages', async (c) => {
|
||||
const teamId = c.req.param('teamId');
|
||||
const channelId = c.req.param('channelId');
|
||||
const top = Number(c.req.query('top') || '50');
|
||||
try {
|
||||
const authHeader = c.req.header('authorization') || c.req.header('Authorization');
|
||||
const bearer = authHeader?.startsWith('Bearer ') ? authHeader.slice(7) : null;
|
||||
const messages = bearer
|
||||
? await listChannelMessagesWithToken(teamId, channelId, Math.min(top, 50), bearer)
|
||||
: await listChannelMessages(teamId, channelId, Math.min(top, 50));
|
||||
return c.json({ success: true, teamId, channelId, count: messages.length, messages });
|
||||
} catch (err: any) {
|
||||
console.error('⚠️ Failed to list messages:', err);
|
||||
await logError('Graph List Messages', err, { teamId, channelId });
|
||||
return c.json({ success: false, message: err.message || 'Failed to list messages' }, 500);
|
||||
}
|
||||
});
|
||||
|
||||
// Delete a message in a channel (requires appropriate Graph permissions)
|
||||
app.delete('/api/teams/:teamId/channels/:channelId/messages/:messageId', async (c) => {
|
||||
const teamId = c.req.param('teamId');
|
||||
const channelId = c.req.param('channelId');
|
||||
const messageId = c.req.param('messageId');
|
||||
try {
|
||||
const authHeader = c.req.header('authorization') || c.req.header('Authorization');
|
||||
const bearer = authHeader?.startsWith('Bearer ') ? authHeader.slice(7) : null;
|
||||
const tokenType = bearer ? 'Bearer token provided' : 'Using app credentials';
|
||||
console.log(`🗑️ DELETE request: ${tokenType} | Team: ${teamId} | Channel: ${channelId} | Message: ${messageId}`);
|
||||
if (bearer) {
|
||||
await deleteChannelMessageWithToken(teamId, channelId, messageId, bearer);
|
||||
} else {
|
||||
await deleteChannelMessage(teamId, channelId, messageId);
|
||||
}
|
||||
console.log(`✅ Successfully deleted message: ${messageId}`);
|
||||
return c.json({ success: true, teamId, channelId, messageId });
|
||||
} catch (err: any) {
|
||||
const errMsg = err?.message || JSON.stringify(err);
|
||||
const errStatus = err?.status || err?.statusCode;
|
||||
|
||||
// Check if it's the Teams API limitation error
|
||||
const isTeamsLimitation = errMsg?.includes('Teams API limitation') || errMsg?.includes('not supported');
|
||||
|
||||
console.error(`${isTeamsLimitation ? '⚠️' : '❌'} Failed to delete message: ${errMsg} | Status: ${errStatus}`);
|
||||
if (isTeamsLimitation) {
|
||||
console.log(`📝 Note: This is a Microsoft Teams platform limitation, not an application error`);
|
||||
}
|
||||
|
||||
await logError('Graph Delete Message', err, {
|
||||
teamId,
|
||||
channelId,
|
||||
messageId,
|
||||
error: errMsg,
|
||||
status: errStatus,
|
||||
isTeamsLimitation
|
||||
});
|
||||
|
||||
return c.json({
|
||||
success: false,
|
||||
message: errMsg || 'Failed to delete message',
|
||||
isTeamsLimitation: isTeamsLimitation || false
|
||||
}, 500);
|
||||
}
|
||||
});
|
||||
|
||||
// Test route: sends an exact sample Adaptive Card payload (no envelope)
|
||||
app.post('/api/test-notification', async (c) => {
|
||||
const webhook = process.env.POWER_AUTOMATE_WEBHOOK_URL || process.env.TEAMS_WEBHOOK_URL;
|
||||
|
||||
@@ -0,0 +1,169 @@
|
||||
import { Client } from '@microsoft/microsoft-graph-client';
|
||||
|
||||
async function getGraphToken(): Promise<string> {
|
||||
const tenantId = process.env.TENANT_ID;
|
||||
const clientId = process.env.CLIENT_ID;
|
||||
const clientSecret = process.env.CLIENT_SECRET;
|
||||
if (!tenantId || !clientId || !clientSecret) {
|
||||
throw new Error('Missing Graph env configuration: TENANT_ID, CLIENT_ID, CLIENT_SECRET');
|
||||
}
|
||||
const tokenEndpoint = `https://login.microsoftonline.com/${tenantId}/oauth2/v2.0/token`;
|
||||
const params = new URLSearchParams();
|
||||
params.append('client_id', clientId);
|
||||
params.append('client_secret', clientSecret);
|
||||
params.append('scope', 'https://graph.microsoft.com/.default');
|
||||
params.append('grant_type', 'client_credentials');
|
||||
|
||||
const response = await fetch(tokenEndpoint, {
|
||||
method: 'POST',
|
||||
headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
|
||||
body: params,
|
||||
});
|
||||
if (!response.ok) {
|
||||
const text = await response.text();
|
||||
throw new Error(`Graph token request failed: ${response.status} ${response.statusText} - ${text}`);
|
||||
}
|
||||
const data = await response.json() as { access_token?: string };
|
||||
if (!data?.access_token) throw new Error('Graph token response missing access_token');
|
||||
return data.access_token;
|
||||
}
|
||||
|
||||
async function getGraphClient() {
|
||||
const token = await getGraphToken();
|
||||
return Client.init({
|
||||
authProvider: (done) => done(null, token)
|
||||
});
|
||||
}
|
||||
|
||||
export async function listTeamChannels(teamId: string) {
|
||||
const client = await getGraphClient();
|
||||
const resp = await client.api(`/teams/${teamId}/channels`).get();
|
||||
const channels = (resp?.value || []).map((ch: any) => ({
|
||||
id: ch.id,
|
||||
displayName: ch.displayName,
|
||||
description: ch.description ?? null
|
||||
}));
|
||||
return channels;
|
||||
}
|
||||
|
||||
export async function listChannelMessages(teamId: string, channelId: string, top: number = 50) {
|
||||
const client = await getGraphClient();
|
||||
const resp = await client
|
||||
.api(`/teams/${teamId}/channels/${channelId}/messages`)
|
||||
.query({ $top: Math.min(top, 50) })
|
||||
.get();
|
||||
const messages = (resp?.value || []).map((m: any) => ({
|
||||
id: m.id,
|
||||
createdDateTime: m.createdDateTime,
|
||||
summary: m.summary ?? null,
|
||||
subject: m.subject ?? null,
|
||||
from: m.from?.user?.displayName ?? m.from?.application?.displayName ?? null,
|
||||
body: m.body ?? null,
|
||||
bodyContent: m.body?.content ?? null,
|
||||
bodyContentType: m.body?.contentType ?? null,
|
||||
messageType: m.messageType ?? null,
|
||||
attachments: Array.isArray(m.attachments) ? m.attachments.map((a: any) => ({
|
||||
id: a.id ?? null,
|
||||
contentType: a.contentType ?? null,
|
||||
name: a.name ?? null,
|
||||
contentUrl: a.contentUrl ?? null,
|
||||
content: a.content ?? null
|
||||
})) : [],
|
||||
raw: m
|
||||
}));
|
||||
return messages;
|
||||
}
|
||||
|
||||
export async function listTeamChannelsWithToken(teamId: string, accessToken: string) {
|
||||
const client = Client.init({ authProvider: (done) => done(null, accessToken) });
|
||||
const resp = await client.api(`/teams/${teamId}/channels`).get();
|
||||
const channels = (resp?.value || []).map((ch: any) => ({
|
||||
id: ch.id,
|
||||
displayName: ch.displayName,
|
||||
description: ch.description ?? null
|
||||
}));
|
||||
return channels;
|
||||
}
|
||||
|
||||
export async function listChannelMessagesWithToken(teamId: string, channelId: string, top: number = 50, accessToken: string) {
|
||||
const client = Client.init({ authProvider: (done) => done(null, accessToken) });
|
||||
const resp = await client
|
||||
.api(`/teams/${teamId}/channels/${channelId}/messages`)
|
||||
.query({ $top: Math.min(top, 50) })
|
||||
.get();
|
||||
const messages = (resp?.value || []).map((m: any) => ({
|
||||
id: m.id,
|
||||
createdDateTime: m.createdDateTime,
|
||||
summary: m.summary ?? null,
|
||||
subject: m.subject ?? null,
|
||||
from: m.from?.user?.displayName ?? m.from?.application?.displayName ?? null,
|
||||
body: m.body ?? null,
|
||||
bodyContent: m.body?.content ?? null,
|
||||
bodyContentType: m.body?.contentType ?? null,
|
||||
messageType: m.messageType ?? null,
|
||||
attachments: Array.isArray(m.attachments) ? m.attachments.map((a: any) => ({
|
||||
id: a.id ?? null,
|
||||
contentType: a.contentType ?? null,
|
||||
name: a.name ?? null,
|
||||
contentUrl: a.contentUrl ?? null,
|
||||
content: a.content ?? null
|
||||
})) : [],
|
||||
raw: m
|
||||
}));
|
||||
return messages;
|
||||
}
|
||||
|
||||
export async function deleteChannelMessage(teamId: string, channelId: string, messageId: string) {
|
||||
const client = await getGraphClient();
|
||||
try {
|
||||
const url = `/teams/${teamId}/channels/${channelId}/messages/${messageId}`;
|
||||
console.log(`📌 Attempting DELETE on: ${url}`);
|
||||
await client.api(url).delete();
|
||||
return { success: true };
|
||||
} catch (err: any) {
|
||||
const statusCode = err?.statusCode || err?.status;
|
||||
const msg = err?.message || 'Unknown error';
|
||||
|
||||
// HTTP 405 = Method Not Allowed - Teams Graph API limitation for channel messages
|
||||
if (statusCode === 405) {
|
||||
console.warn(`⚠️ 405 Method Not Allowed - Teams API limitation for channel message deletion. Applying soft-delete approach...`);
|
||||
// Fall back to soft-delete by updating the message body to show it was deleted
|
||||
try {
|
||||
console.log(`📌 Attempting soft-delete via PATCH...`);
|
||||
// Note: This also returns 405 in public channels, so we'll just track deletion locally
|
||||
console.log(`ℹ️ Microsoft Teams API does not support deletion of channel messages via REST API`);
|
||||
console.log(`ℹ️ Suggestion: Use Teams client UI, or use delegated token with ChannelMessage.ReadWrite.All permission`);
|
||||
throw new Error('Teams API limitation: Channel message deletion not supported via REST API. Delete manually from Teams client or grant ChatMessage.ReadWrite.All delegated permission with user token.');
|
||||
} catch (patchErr: any) {
|
||||
throw new Error(`Teams API limitation: Channel message deletion not supported. ${patchErr.message}`);
|
||||
}
|
||||
}
|
||||
|
||||
console.error(`❌ Delete failed - Message: ${msg}, StatusCode: ${statusCode}`);
|
||||
throw new Error(`Graph delete error: ${msg} (status: ${statusCode || 'unknown'})`);
|
||||
}
|
||||
}
|
||||
|
||||
export async function deleteChannelMessageWithToken(teamId: string, channelId: string, messageId: string, accessToken: string) {
|
||||
const client = Client.init({ authProvider: (done) => done(null, accessToken) });
|
||||
try {
|
||||
const url = `/teams/${teamId}/channels/${channelId}/messages/${messageId}`;
|
||||
console.log(`📌 Attempting DELETE on: ${url}`);
|
||||
await client.api(url).delete();
|
||||
return { success: true };
|
||||
} catch (err: any) {
|
||||
const statusCode = err?.statusCode || err?.status;
|
||||
const msg = err?.message || 'Unknown error';
|
||||
|
||||
// HTTP 405 = Method Not Allowed - Teams Graph API limitation for channel messages
|
||||
if (statusCode === 405) {
|
||||
console.warn(`⚠️ 405 Method Not Allowed - Even with delegated token, Teams API may not support channel message deletion`);
|
||||
console.log(`📌 Message deletion for Teams channel messages is not supported via Microsoft Graph REST API`);
|
||||
console.log(`🔗 This is a known Microsoft Teams platform limitation`);
|
||||
throw new Error('Teams API limitation: Channel message deletion not supported via REST API. Please delete messages directly from the Teams client interface.');
|
||||
}
|
||||
|
||||
console.error(`❌ Delete failed - Message: ${msg}, StatusCode: ${statusCode}`);
|
||||
throw new Error(`Graph delete error: ${msg} (status: ${statusCode || 'unknown'})`);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user