Azure / Azure/azure-functions-host

Add support for URL Authorization Rules in Azure Functions

Open
#2,180 1 comment 2 reactions 0 assignees View on GitHub
enhancement
Dominant language
C#
Stars
2k
Forks
482
Avg merge
2d 10h
Merged PRs (30d)
36

Description

When adding Authentication/Authorization to an Azure Function App, all functions in the App are by default protected.

I am experiencing the exact issue as described in this article when using Traffic Manager:

https://blogs.msdn.microsoft.com/jpsanders/2017/02/06/azure-traffic-manager-probe-degraded-due-to-401-from-azure-web-app/

A similar feature was added to Azure Web Apps and it would be nice to see this feature added to Azure Functions to allow Traffic Manager to ping a Function that allows anonymous requests.

The workaround today is to allow anonymous requests for the entire Function App

#### Repro steps

1) Create an Azure Function App with Authentication/Authorization enabled.
2) Add a Function.
3) Create a Traffic Manager resource that points the Function App.

#### Actual behavior

The Endpoint is always reported as degraded because either the app returns 401 or 30x for redirect to the auth server.

#### Known workarounds

Allow anonymous requests in the Authentication configuration.

Contributor guide

Open the contributing guide

Research direction

Start with the listed repro steps in the issue and review the linked Azure Traffic Manager article to understand the 401/30x probe failure. Trace the Azure Functions Authentication/Authorization configuration involved in protecting all functions. Done means a URL authorization rule can allow the Traffic Manager probe while preserving authentication for other functions.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, csharp
Domain
authentication, cloud
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
32/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.