LogicAppsUX icon indicating copy to clipboard operation
LogicAppsUX copied to clipboard

Watchlists - Get all Watchlist Items for a given Watchlist (V2) / SkipToken encoded by default as URI

Open Tnecsea opened this issue 1 year ago • 3 comments

Describe the Bug with repro steps

  1. Create a logic app
  2. Create a watchlist containing more than 100 items
  3. Search Microsoft Sentinel's connectors
  4. Add "Watchlists - Get all Watchlist Items for a given Watchlist (V2)" operation to your logic app 2 times
  5. Configure operation settings (workspaceid, subscriptionid, watchlistname…)
  6. Add skipToken parameter from first operation to the second (logic app expre for ex: body('Watchlists_-Get_all_Watchlist_Items_for_a_given_Watchlist(V2)_1')['properties']['skipToken']) so it should retrieve the next 100 items

What type of Logic App Is this happening in?

Consumption (Portal)

Which operating system are you using?

Windows

Are you using new designer or old designer

New Designer

Did you refer to the TSG before filing this issue? https://aka.ms/lauxtsg

Yes

Workflow JSON


Screenshots or Videos

Image

Image

Image

Image

Image

Browser

  • Browser: Edge (last published version)

Additional context

First operation "Watchlists - Get all Watchlist Items for a given Watchlist (V2)1" (screenshot 2) retrieving me the first 100 items of my watchlist (that has a total of 373 items) , and a base64 skipToken.

I added a Compose operation with logic app expression replace because the token was malformed (as you can see in screenshot 3, it contains _ and - characters that has to be / and + characters to validate base64 format).

Then i added compose's output to the second Get all Watchlist Items operation as skipToken parameter.

It seems, following code view (screenshot 4) that something added an "encodeURIComponent" logic app expression function to every parameter which does not appear in regular designer view.

It results in encoding my base64token as URI and operation to fail (screenshot 5), the only workaround i found is to remove encodeURIComponent expression directly in code view.

Is this a bug ? Is there any way i can disable this ? or any other way to make a clean pagination (pagination settings is not available for this operation) ?

Tnecsea avatar Nov 27 '24 09:11 Tnecsea

This is likely due to a Swagger property that was being ignored in previous designer. @preetriti1 can you verify this and determine if this is a bug on our behavior or the swagger definition?

hartra344 avatar Dec 02 '24 13:12 hartra344

This seems like a bug due to an update in the last 3-6 months, as I had a working logic app using this action, and when I updated the skipToken parameter it started adding the encodeURIComponent, which broke an important flow for us. The endpoint on the other end expects a base64 string as the token, however this action automatically adds the uriEncode, which breaks it. Can we please get a fix on this?

A friendly nudge @preetriti1

sc-roberts avatar Feb 24 '25 03:02 sc-roberts

Hi guys, any news? The issue is still present. I cannot use the item "Watchlists - Get all Watchlist Items for a given Watchlist (V2)" together with SkipToken. When I use it I am getting Base64 issues:

H4sIAAAAAAAACouuVirJz07NU7JS0g7ydLGq8zEPTXP0zQwqyrbI9g4sDnIEAud0W1vloBArQ-WQIGcrQwMDZc_g...zoYsbFJgA5XMTK6DCrsaWls4uZuZGzkq1tbEA0jt68qQAAAA%3D

At the end there should be a "=" but it's an %3D. I am not able to change this since the item "Watchlists - Get all Watchlist Items for a given Watchlist (V2)" is doing the encoding: I tried to get a workaround but the only solution I see is to write my own code based on a simple HTTP request.

LennartB1337 avatar Nov 10 '25 17:11 LennartB1337