Azure / Azure/api-management-developer-portal
UI Issues and Bugs with the Operation Details Widget.
- Dominant language
- TypeScript
- Stars
- 545
- Forks
- 360
- PR merge metrics
- No merged PRs in 30d
Description
## Bug description
- It shouldn't be possible to edit or remove required headers

It shouldn't be possible to remove or edit **Authorization** or **Ocp-Apim-Subscription-Key** headers.
- Setting values in APIM parameters is causing the parameter value to become un-editable.

In the screenshot a value for countrycode was added, it isn't possible to modify it. Also it isn't set as default in APIM, therefore it should also be empty with the option to select FRA.
- Getting a 401 error that says access denied error due to missing subscription key, even though the product is already subscripted to.

If the network console is checked, we see that the headers are being sent as "0: name: value" ex: "2: Ocp-Apim-Subscription-Key: value".

## Reproduction steps
1. Go to a page with the Operation Details widget.
## Expected behavior
- It shouldn't be possible to edit or remove required headers.
- When adding parameter values in APIM, it should still be possible to edit the parameter. Also it should only default to the value, when it is set as the default in APIM.
- Sending requests for products you are properly subscripted to shouldn't give a 401 error.
## Is your portal managed or self-hosted?
Self-hosted
## Release tag or commit SHA (if using self-hosted version)
release 2.18.0
## API Management service name
apim-apip-internal-dev-naa
## Environment
- Operating system: Windows 10
- Browser: Chrome: 102
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the Operation Details widget on a self-hosted portal running release 2.18.0, reproducing the header, APIM parameter, and subscription-key behaviors described in the issue. Inspect the network request to confirm how headers and parameter values are represented. Done means required headers cannot be edited or removed, parameter values remain editable and only APIM defaults are prefilled, and subscribed requests no longer fail with the reported 401.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, typescript
- Domain
- api, authentication, frontend
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100