Skip to main content
Answered

Unable to work the API

  • February 25, 2026
  • 8 replies
  • 109 views

Forum|alt.badge.img+1

Hi, 

 

I was wondering if anyone can help me, I have been authorised by the devs for my app to pull multiple athletes data via the API. The issue I am having is when I try to run the link to get the authorisation, it’s not hitting my logic app and keeps erroring out. Is anyone have any issues like this before? My logic app seems fine, its building the oauth link as I am trying to do one link fits all for authorisation and not individual links manually. 

 

Any advise would be great. 

 

Thanks

Jamie

Best answer by npatch

Your previous messages with the link and the error only now got reviewed.
So, googling the error, it seems it is an Azure issue, basically an authentication issue on the Azure side. Have you set who can trigger your HTTP request url? The error, as I understand it, means that the redirect URI you give to strava cannot be authenticated when the request originates from Strava. It might work for you in a developer environment, but it doesn’t for Strava and the problem is the request is missing something like a token, called the Shared Access  Signature, which presents as a url parameter with the key “sig”. I would advise you to look into authentication docs in Azure though and see pros and cons. One con of the SAS flow is that if someone else knows the URL and the SAS, they can hit your logic app.

8 replies

Jan_Mantau
Superuser
Forum|alt.badge.img+27
  • Superuser
  • February 25, 2026

Can you give us an example of the link that does not work and specific error information?


Forum|alt.badge.img+1
  • Author
  • Hub Rookie
  • February 25, 2026

strava.com/oauth/authorize?client_id=201871&response_type=code&redirect_uri=https://prod-23.uksouth.logic.azure.com:443/workflows/6f3da37616554ead86b164a2b25440e2/triggers/When_an_HTTP_request_is_received/paths/invoke?api-version=2016-10-01&sp=%2Ftriggers%2FWhen_an_HTTP_request_is_received%2Frun&sv=1.0&sig=elJp_X7JbJ0DMvw4WLSgXbvsU5wAjpUPdin08p-X0I4&approval_prompt=force&scope=read,activity:read_all 

This is the link I am using to get to the authorisation, it included my azure webhook, once I hit authorise then it refuses to trigger the logic app webhook. Then shows 

{"error":{"code":"DirectApiAuthorizationRequired","message":"The request must be authenticated only by Shared Access scheme."}} on the webpage

 


Forum|alt.badge.img+1
  • Author
  • Hub Rookie
  • February 25, 2026

Can you give us an example of the link that does not work and specific error information?

strava.com/oauth/authorize?client_id=201871&response_type=code&redirect_uri=https://prod-23.uksouth.logic.azure.com:443/workflows/6f3da37616554ead86b164a2b25440e2/triggers/When_an_HTTP_request_is_received/paths/invoke?api-version=2016-10-01&sp=%2Ftriggers%2FWhen_an_HTTP_request_is_received%2Frun&sv=1.0&sig=elJp_X7JbJ0DMvw4WLSgXbvsU5wAjpUPdin08p-X0I4&approval_prompt=force&scope=read,activity:read_all

 

This link includes my logic app webhook, then I get the authorisation but when I hit authorise I get this error message. 

 

{"error":{"code":"DirectApiAuthorizationRequired","message":"The request must be authenticated only by Shared Access scheme."}}

 

I am looking to extract the code from the link then save it to my excel through my logic app. 


Forum|alt.badge.img+3
  • Hub Rookie
  • February 25, 2026

Are you referring to the link with `/oauth/authorize`? Also did you set localhost as the Authorization Callback Domain, in your app? Or do you have your own domain?

 


Forum|alt.badge.img+1
  • Author
  • Hub Rookie
  • February 25, 2026

Are you referring to the link with `/oauth/authorize`? Also did you set localhost as the Authorization Callback Domain, in your app? Or do you have your own domain?

 

Yes the link with the /0auth in it and I have set the domain to Azure’s domain

 


Forum|alt.badge.img+3
  • Hub Rookie
  • February 25, 2026

Asking specifically about /authorize. Disclaimer, I have no exp with Azure specifically, but in general, if you have a web app, you initiate the whole thing by redirecting to “https://www.strava/oauth/authorize?client_id=…..” with the client_id, response_type, and redirect uri etc parameters. The redirect URI is whatever you expect/listen for in your web(Azure in this case) app to grab those url parameters and that uri’s domain must match whatever you’ve added in the app registration’s Domain field. Your app must be able to listen to request on the redirect_uri to extract the authorization_code and move on.

e.g. in postman, to get it working, you have to add `oauth.pstmn.io` as the Application’s Domain and then the redirect_uri must be ”https://oauth.pstmn.io/v1/callback”, which Postman expects, to complete the Oauth2 flow.


Forum|alt.badge.img+3
  • Hub Rookie
  • Answer
  • February 25, 2026

Your previous messages with the link and the error only now got reviewed.
So, googling the error, it seems it is an Azure issue, basically an authentication issue on the Azure side. Have you set who can trigger your HTTP request url? The error, as I understand it, means that the redirect URI you give to strava cannot be authenticated when the request originates from Strava. It might work for you in a developer environment, but it doesn’t for Strava and the problem is the request is missing something like a token, called the Shared Access  Signature, which presents as a url parameter with the key “sig”. I would advise you to look into authentication docs in Azure though and see pros and cons. One con of the SAS flow is that if someone else knows the URL and the SAS, they can hit your logic app.


Forum|alt.badge.img+1
  • Author
  • Hub Rookie
  • February 26, 2026

Your previous messages with the link and the error only now got reviewed.
So, googling the error, it seems it is an Azure issue, basically an authentication issue on the Azure side. Have you set who can trigger your HTTP request url? The error, as I understand it, means that the redirect URI you give to strava cannot be authenticated when the request originates from Strava. It might work for you in a developer environment, but it doesn’t for Strava and the problem is the request is missing something like a token, called the Shared Access  Signature, which presents as a url parameter with the key “sig”. I would advise you to look into authentication docs in Azure though and see pros and cons. One con of the SAS flow is that if someone else knows the URL and the SAS, they can hit your logic app.

Hi, Thank you for looking into it, I took a look at the azure error and you were correct, I build a function app which then anonymised the url parameters which allow me to POST it to my logic app and then it ran. 

 

Thank you so much for looking into it for me it’s much appreciated.