After successfully connecting my locally hosted (botkit-based) bot to Microsoft's Bot Framework Emulator (using a localhost address for the messaging endpoint), I'm now trying to connect it to the framework's webchat (using an ngrok's hostname for my local bot). However, I get an 'unauthorized' when webchat tries to connect. More on my bot:
- The bot integrates with the Bot Framework via botkit's own Botkit Framework Adapter (see https://github.com/howdyai/botkit/blob/main/packages/docs/core.md#using-bot-framework-channels for details) *The bot is hosted locally (dev version, which is the one I'm trying to test), and exposed via ngrok. Its production version will be hosted on AWS.
Here's what I've tried so far:
- Using methods #1 and #2 described in https://learn.microsoft.com/en-us/azure/bot-service/bot-service-channel-connect-webchat?view=azure-bot-service-4.0 to embed the webchat using an iframe with the provided webchat secret and also a token (obtained separately via POSTMAN).
- Using a modification of method #3 in the same web page, in which I obtained a Direct Line token instead (via POSTMAN) and then tried to use it in the html provided in there.
- I've also tried 'Test in Web Chat' in the Azure console.
In all those cases my bot's own log displays the same: "Experienced an error inside the turn handler Error: BotFrameworkAdapter.processActivity(): 401 ERROR Error: Unauthorized. Invalid AppId passed on token: blah".
The browser console shows different results for the last case compared to the website embeds as follows:
- (website embeds), I see a 502 in the browser's console, which I believe is expected given the 401 response from the bot (as explained by other sources).
- (Test in Web Chat'), I see several other errors in the browser web console in addition to the 502. One of those errors makes me think that perhaps 'Test in Web Chat' does not actually support non-Azure hosted bots (MsPortalFx/Base/Base.Net Base.Net: Security issue: Request to send auth token to untrusted domain 'myngrokhostname.scm.azurewebsites.net'. Only a fixed set of domains should be configured to receive auth tokens).
So here are my immediate questions:
- Does the 'Test in web chat' feature require an Azure-hosted bot?
- Given that I don't specify myself an appId and password when configuring the webchat channel (since it gets automatically configured), how could I be getting an error indicating that the wrong appId is being used? (note: the appId and password are part of the bot's adapter configuration as explained in the link I shared earlier; this is the only spot in which I entered them, and they were copied directly from the AzureBot configuration console)
Aside from the above questions, do you have any other suggestions on what could be wrong/missing in my environment? BTW, by now I believe I have read all of the similar posts that refer to 'unauthorized' errors while using webchat and none of them has helped so far, including those referenced in the first comment provided below. For the record, here are the posts (not mentioned in the comment) that I've also read:
- There was an error sending this message to your bot - Test in Web Chat
- Test in Web Chat typing message returns "Not found" HTTP status code after deploying bot to Azure
- Getting a 403 while connecting local bot to local WebChat client (works with Emulator though) (note: a comment in the last post suggests that I should be looking into offline-directline to get this to work; I may try this although I don't understand why it should be needed). Any further help would be much appreciated.
After all the time spent debugging this issue, it turned out to be a simple typo in the botkit controller creation code. Instead of having it use 'adapterConfig' to set the bot's adapter to the built-in bot framework adapter, it was using 'adapter_config'. This was breaking the integration with the bot framework, as no app Id or password were being passed on. Thanks to Microsoft Support for troubleshooting help.