You can interact with SharePoint via REST API's and perform actions like adding, deleting, updating, fetching data. Two popular approaches are using SharePoint App Registration and Azure AD app (Graph API).
As a developer you are required to build the correct REST query for use, or may be even pass on to another developer (OAuth + REST) for consuming in 3rd party external platforms like Java, Python, .Net, etc. It is a good idea to test the links before use.
Another important factor is Authentication and Authorization while accessing SharePoint information, you may want to use the app credentials (client Id and Secret) and confirm connectivity.
⭐ PostmanPostman is a great tool used for HTTP API testing, where REST API can be used to retrieve, add, delete, update data. You can examine the response in JSON, XML, HTML, Text format before actual development, without writing any code.
If everything looks good, you can generate code snippets in almost all language/framework like Python, PowerShell, Java, C, C#, etc. and embed it directly in your code, that's rapid development.
Read more on Postman and download here.
We will learn how to use Postman to access SharePoint data using REST API and save time and efforts during development.
⚡️ How to test SharePoint REST API using PostmanTo authorize and access SharePoint REST API from external system, we need to generate access-token ("Client Id" and "Client Secret") by registering SharePoint App and pass with request header and the URL.
High level steps are outlined below.
- Register the SharePoint Add-In To begin, we need to register a SharePoint Add-In and grant it permissions to access SharePoint information, like site, document library, lists.
- Retrieve the Tenant ID Now with the App registered, we are ready to access the SharePoint Online information from external system or tools.
Refer this article for details - steps to register SharePoint Add-In, generate 'client id' and 'client secret', grant permissions.
We will retrieve the Tenant ID of SharePoint Online tenant using Postman tool.
- Launch the Postman client.
- Select "Get" Method for Request (refer image below).
- In the "Request URL" textbox, enter URL in this format.
- Navigate to the Header section and add Key "Authorization" to send with the request (refer image below).
- Click "Send" to submit the request.
- The response will fail with status message "401 Unauthorized".
- We will generate the access token to fix this error.
FORMAT --> https://[sitename].sharepoint.com/_vti_bin/client.svc/
EXAMPLE --> https://c2c.sharepoint.com/_vti_bin/client.svc/
Access denied. You do not have permission to perform this action or access this resource.
Now we will generate an access token from Postman tool, which will be used to access the SharePoint information.
- Examine the the response Header section (refer image below) and look for "WWW-Authenticate" header. Look for below 2 values and note them for future use - realm and client_id.
realm = value for the SharePoint Online Tenant Id (varies for each M365 Tenant)
client_id = value for resource information (this value is common always)
- After getting the "Tenant ID", we will request the Access Token. To do this, use URL in the below format.
https://accounts.accesscontrol.windows.net/[Tenant ID]/tokens/OAuth/2[Tenant ID] = realm value from the previous step
- Select the request as POST method.
- Apply Header configuration parameters as below.
Key Value Content-Type application/x-www-form-urlencoded
- Apply Body configuration parameters as below.
Key Value grant_type client_credentials client_id ClientID@TenantID client_secret ClientSecret (generated while App registration) resource resource/SiteDomain@TenantID
You will need to build some values by combining multiple values fetched previously.
client_credentials = client_credentials (use as it, do not change)
ClientID@TenantID = Client ID (generated during App registration) + @ sign + Tenant ID (fetched while retrieving Tenant ID)
ClientSecret = Client Secret generated while App registration
resource/SiteDomain@TenantID = 00000003-0000-0ff1-ce00-000000000000 + "/" sign + email@example.com + @ sign + Tenant ID (fetched while retrieving Tenant ID)
- Click Send button to submit the request.
- The Status is now shown as "200 OK" which means the connection to SharePoint Online was successful using the client id and secret.
- Now we can find the access token from the "Body" section (refer image below). Copy the value of parameter/key "access_token" and note for use the future steps.
- Important Note - The Access token has an expiry and is valid only for few hours (5 to 6 hours usually). So you need to generate the new token regularly via your code.
- Now, let us connect and access SharePoint Online using Postman. Use a very simple REST query to fetch the SharePoint Online site Title (replace URL to your own SharePoint site to which the App has access).
- Select the request as GET method.
- Apply Header configuration parameters as below.
Key Value Authorization Bearer [value of access_token] Accept application/json;odata=verbose
Note that there is a space in between Bearer and Access token value (refer image below).
- Click the "Send" button
- Response should be success with status 200 OK and the SharePoint Online site Title should be returned (Body section), assuming all values were passed correctly. If there is an access denied or unauthorized access error, check the configuration again.
You can examine the response in JSON, HTML, plain text, etc.
- Read SharePoint information - List items, Documents, etc.
- Write to SharePoint - create lists, create list items, upload documents, etc.
- Fetch search results - using search API's.
- Try Graph API.
- Other more ways to explore.
⚡️ Generate code snippets form PostmanYou can generate code snippets in various languages and frameworks with Postman. Select the request --> click Code icon (right panel) --> select language --> view and copy generated code snippet.
These code snippets are ready-to-use, just embed them in your code and start using (ensure you pass in correct authorization account/key for connection).
Have Questions? Post them here!
- SharePoint list excel import error - Title is a required filed and can't be empty
- How to extract deployed WSP solution from SharePoint FARM using PowerShell
- How to change SharePoint Online site collection or subsite URL address
- Move Copy Migrate SharePoint OneDrive files folders to different site collection location
- How to configure PDF iFilter for SharePoint
- Sharepoint errors were found when compiling the workflow
- SharePoint error - Your organization doesn't allow sharing with users from this domain. Please contact your IT department for help. (OSE403)
- How to wrap column text in SharePoint Online Modern List Grid View using JSON formatting
- Setup synonyms or alias or thesaurus in SharePoint
- How to enable missing SharePoint Site Assets, Site Pages library App
- The declared package does not match the expected package Eclipse - Android
- JSON Tutorial: List of Lessons - Json-Tutorial
- Android : No Launcher activity found! Error - Android
- Set Title to Android AlertDialog - Android
- Android AlertDialog with Yes No and Cancel Button - Android
- New-SPLogFile PowerShell - create new SharePoint log file - SharePoint
- Get HTML table td, tr or th inner content value with id or name attribute - Html
- Center Align TextView Android Horizontally or Vertically - Android
- NOTE: This project contains resource errors, so aapt did not succeed, which can cause rendering failures. Fix resource problems first. - Android
- Android Disable back button programatically - Android
- How to make a dummy phone call from Android Emulator device - Android
- How to extract deployed WSP solution from SharePoint FARM using PowerShell - SharePoint
- Kill or force quit stuck application or process in Mac OS X - Mac-OS-X
- Deploy SharePoint wsp solution package using PowerShell - SharePoint
- Calculate Volume of Sphere - C-Program