You can interact with SharePoint via REST API's and perform actions like adding, deleting, updating, fetching data. Two popular approaches are using SharePoint App Registration and Azure AD app (Graph API).
As a developer you are required to build the correct REST query for use, or may be even pass on to another developer (OAuth + REST) for consuming in 3rd party external platforms like Java, Python, .Net, etc. It is a good idea to test the links before use.
Another important factor is Authentication and Authorization while accessing SharePoint information, you may want to use the app credentials (client Id and Secret) and confirm connectivity.
⭐ PostmanPostman is a great tool used for HTTP API testing, where REST API can be used to retrieve, add, delete, update data. You can examine the response in JSON, XML, HTML, Text format before actual development, without writing any code.
If everything looks good, you can generate code snippets in almost all language/framework like Python, PowerShell, Java, C, C#, etc. and embed it directly in your code, that's rapid development.
Read more on Postman and download here.
We will learn how to use Postman to access SharePoint data using REST API and save time and efforts during development.
⚡️ How to test SharePoint REST API using PostmanTo authorize and access SharePoint REST API from outside of SharePoint (external application), we need to generate Bearer token ("using Client Id" and "Client Secret") by registering SharePoint App and pass with request header and the URL. Refer link below for steps.
High level steps are outlined below.
- Register the SharePoint Add-In To begin, we need to register a SharePoint Add-In and grant it permissions to access SharePoint information, like site, document library, lists.
- Retrieve the Tenant ID Now with the App registered, we are ready to access the SharePoint Online information from external system or tools.
Refer this article for steps - steps to register SharePoint Add-In, generate 'client id' and 'client secret', grant permissions.
We will retrieve the Tenant ID of SharePoint Online tenant using Postman tool.
- Launch the Postman client.
- Select "Get" Method for Request (refer image below).
- In the "Request URL" textbox, enter URL in this format.
- Navigate to the Header section and add Key "Authorization" to send with the request (refer image below).
- Click "Send" to submit the request.
- The response will fail with status message "401 Unauthorized".
- We will generate the (access) Bearer token to fix this error.
FORMAT --> https://[sitename].sharepoint.com/_vti_bin/client.svc/
EXAMPLE --> https://c2c.sharepoint.com/_vti_bin/client.svc/
Access denied. You do not have permission to perform this action or access this resource.
Now we will generate the bearer access token from Postman tool, which will be used to access the SharePoint information.
- Examine the the response Header section (refer image below) and look for "WWW-Authenticate" header. Look for below 2 values and note them for future use - realm and client_id.
realm = value for the SharePoint Online Tenant Id (varies for each M365 Tenant)
client_id = value for resource information (this value is common always)
- After getting the "Tenant ID", we will request the Access Token. To do this, use URL in the below format.
https://accounts.accesscontrol.windows.net/[Tenant ID]/tokens/OAuth/2[Tenant ID] = realm value from the previous step
- Select the request as POST method.
- Apply Header configuration parameters as below.
Key Value Content-Type application/x-www-form-urlencoded
- Apply Body configuration parameters as below.
Key Value grant_type client_credentials client_id ClientID@TenantID client_secret ClientSecret (generated while App registration) resource resource/SiteDomain@TenantID
You will need to build some values by combining multiple values fetched previously.
client_credentials = client_credentials (use as it, do not change)
ClientID@TenantID = Client ID (generated during App registration) + @ sign + Tenant ID (fetched while retrieving Tenant ID)
ClientSecret = Client Secret generated while App registration
resource/SiteDomain@TenantID = 00000003-0000-0ff1-ce00-000000000000 + "/" sign + firstname.lastname@example.org + @ sign + Tenant ID (fetched while retrieving Tenant ID)
- Click Send button to submit the request.
- The Status is now shown as "200 OK" which means the connection to SharePoint Online was successful using the client id and secret.
- Now we can find the access token from the "Body" section (refer image below). Copy the value of parameter/key "access_token" and note for use the future steps.
- Important Note - The (access) Bearer token has an expiry and is valid only for few hours (5 to 6 hours usually). So you need to generate the new token regularly via your code.
- Now, let us connect and access SharePoint Online using Postman. Use a very simple REST query to fetch the SharePoint Online site Title (replace URL to your own SharePoint site to which the App has access).
- Select the request as GET method.
- Apply Header configuration parameters as below.
Key Value Authorization Bearer [value of access_token] Accept application/json;odata=verbose
Note that there is a space in between Bearer and Access token value (refer image below).
- Click the "Send" button
- Response should be success with status 200 OK and the SharePoint Online site Title should be returned (Body section), assuming all values were passed correctly. If there is an access denied or unauthorized access error, check the configuration again.
You can examine the response in JSON, HTML, plain text, etc.
- Read SharePoint information - List items, Documents, etc.
- Write to SharePoint - create lists, create list items, upload documents, etc.
- Fetch search results - using search API's.
- Try Graph API.
- Other more ways to explore.
⚡️ Generate code snippets form PostmanYou can generate code snippets in various languages and frameworks with Postman. Select the request --> click Code icon (right panel) --> select language --> view and copy generated code snippet.
These code snippets are ready-to-use, just embed them in your code and start using (ensure you pass in correct authorization account/key for connection).
Have Questions? Post them here!
- Managed Metadata error - The data returned from the tagging UI was not formatted correctly
- How to generate client id and secret to register SharePoint App with OAuth
- Create SharePoint Site Collection with new Content database in existing web application
- Fix Error 2711 SQL RBS client - The installer has encountered an unexpected error. The specified Feature name ('Docs') not found in Feature table
- How to exclude results from SharePoint Search
- 'Edit Document' Requires a Windows Sharepoint Services-compatible application and Microsoft Internet Explorer 6.0 or higher
- [Solved] SharePoint Access Denied error editing Document Name
- Recommended size and resolution for SharePoint Online Site logo
- SharePoint Server 2016 IT Preview - new improved Features and Enhancements
- Restore deleted Office 365 SharePoint group site
- SharePoint An unexpected error has occurred - Correlation ID and PowerShell Merge-SPlogfile
- [Solved] SharePoint Search Internal server error exception
- SharePoint CAML query error - The XML source is not correct
- How to hide quick launch in SharePoint classic site
- Not receiving email notification alert in SharePoint Online workflow - Power Automate, FLOW
- Change SharePoint search results FullTextSqlQuery RowLimit 10000
- Fix Power BI error Access to the resource is forbidden when connecting SharePoint Online List as data source
- [Fix] Restricted View permission level missing in SharePoint Online site library
- How to upload file programmatically to SharePoint Document Library using Server Object Model C# .Net
- How to create classic site in SharePoint Online
- That did'nt work, Issue type User not in directory - SharePoint external access error
- Merge-SPlogfile PowerShell - SharePoint Correlation ID error
- Fix Power BI 404 not found error when connecting SharePoint Online List as Data Source
- SharePoint Server 2016 IT Preview Deprecated Removed features
- SharePoint error - An exception occurred when trying to issue security token: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms..
- How to check if Java main thread is alive - Java
- ERROR x86 emulation currently requires hardware acceleration. Intel HAXM is not installed on this machine - Android
- This operation couldnt be completed. Unable to locate a Java Runtime. [macOS] - MacOS
- SDK Manager: failed to install : Android Studio on Windows - Android-Studio
- List of Programming Languages Supported by Notepad++ - NotepadPlusPlus
- How to force quit or kill Notepad++ Process - NotepadPlusPlus
- TypeError: must be str, not int - Python
- How to Refresh Mac Desktop - MacOS