exchangelib with OAUTH2 get error : exchangelib.errors.MalformedResponseError: Unknown failure in response.

[zx2015]

I got error message "exchangelib.errors.MalformedResponseError: Unknown failure in response."
Could you help?

My code:

credentials = OAuth2Credentials(
    client_id = client_id,
    client_secret = client_secret,
    tenant_id = tenant_id
)

config = Configuration(
    credentials = credentials,
    auth_type = OAUTH2,
    service_endpoint="https://outlook.office365.com/EWS/Exchange.asmx",
    version=Version(build=EXCHANGE_O365)
)

account = Account(primary_smtp_address=username,
                  credentials=credentials,
                  config=config,
                  autodiscover=False,
                  access_type=IMPERSONATION)
folder = account.inbox
for email in folder.all().order_by('-datetime_received')[:10]:
    print(email.subject, email.sender.name, email.datetime_received)

Error messages I got:

Traceback (most recent call last):
  File "C:\Python3\Lib\site-packages\cached_property.py", line 70, in __get__
    return obj_dict[name]
           ~~~~~~~~^^^^^^
KeyError: 'inbox'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "C:\Python3\Lib\site-packages\cached_property.py", line 70, in __get__
    return obj_dict[name]
           ~~~~~~~~^^^^^^
KeyError: 'root'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "C:\PycharmProjects\Jira_tools\test4.py", line 29, in <module>
    folder = account.inbox
             ^^^^^^^^^^^^^
  File "C:\Python3\Lib\site-packages\cached_property.py", line 74, in __get__
    return obj_dict.setdefault(name, self.func(obj))
                                     ^^^^^^^^^^^^^^
  File "C:\Python3\Lib\site-packages\exchangelib\account.py", line 286, in inbox
    return self.root.get_default_folder(Inbox)
           ^^^^^^^^^
  File "C:\Python3\Lib\site-packages\cached_property.py", line 74, in __get__
    return obj_dict.setdefault(name, self.func(obj))
                                     ^^^^^^^^^^^^^^
  File "C:\Python3\Lib\site-packages\exchangelib\account.py", line 350, in root
    return Root.get_distinguished(account=self)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Python3\Lib\site-packages\exchangelib\folders\roots.py", line 145, in get_distinguished
    return cls._get_distinguished(
           ^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Python3\Lib\site-packages\exchangelib\folders\base.py", line 225, in _get_distinguished
    return cls.resolve(account=folder.account, folder=folder)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Python3\Lib\site-packages\exchangelib\folders\base.py", line 529, in resolve
    folders = list(FolderCollection(account=account, folders=[folder]).resolve())
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Python3\Lib\site-packages\exchangelib\folders\collections.py", line 335, in resolve
    yield from self.__class__(account=self.account, folders=resolveable_folders).get_folders(
  File "C:\Python3\Lib\site-packages\exchangelib\folders\collections.py", line 403, in get_folders
    yield from GetFolder(account=self.account).call(
  File "C:\Python3\Lib\site-packages\exchangelib\services\get_folder.py", line 51, in _elems_to_objs
    for folder, elem in zip(self.folders, elems):
  File "C:\Python3\Lib\site-packages\exchangelib\services\common.py", line 279, in _chunked_get_elements
    yield from self._get_elements(payload=payload_func(chunk, **kwargs))
  File "C:\Python3\Lib\site-packages\exchangelib\services\common.py", line 300, in _get_elements
    yield from self._response_generator(payload=payload)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Python3\Lib\site-packages\exchangelib\services\common.py", line 263, in _response_generator
    response = self._get_response_xml(payload=payload)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Python3\Lib\site-packages\exchangelib\services\common.py", line 396, in _get_response_xml
    r = self._get_response(payload=payload, api_version=api_version)
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Python3\Lib\site-packages\exchangelib\services\common.py", line 347, in _get_response
    r, session = post_ratelimited(
                 ^^^^^^^^^^^^^^^^^
  File "C:\Python3\Lib\site-packages\exchangelib\util.py", line 866, in post_ratelimited
    protocol.retry_policy.raise_response_errors(r)
  File "C:\Python3\Lib\site-packages\exchangelib\protocol.py", line 738, in raise_response_errors
    raise MalformedResponseError(
exchangelib.errors.MalformedResponseError: Unknown failure in response. Code: 403 headers: {'Cache-Control': 'private', 'Content-Length': '0', 'Content-Type': 'text/xml; charset=utf-8', 'Server': 'Microsoft-HTTPAPI/2.0', 'X-NanoProxy': '1,1', 'X-AspNet-Version': '4.0.30319', 'Request-Id': '7d0092f0-89ec-e947-7e65-a0613a409004', 'X-CalculatedFETarget': 'DUZPR01CU005.internal.outlook.com', 'Alt-Svc': 'h3=":443";ma=2592000,h3-29=":443";ma=2592000', 'MS-CV': '8JIAfeyJR+l+ZaBhOkCQBA.1.1', 'Restrict-Access-Confirm': '1', 'X-BackEndHttpStatus': '403,403', 'X-BEServer': 'DB9PR07MB9621', 'X-BeSku': 'WCS7', 'X-CalculatedBETarget': 'DB9PR07MB9621.eurprd07.prod.outlook.com', 'X-DiagInfo': 'DB9PR07MB9621', 'X-FEEFZInfo': 'DUB', 'X-UserType': 'Business', 'X-FEProxyInfo': 'DUZPR01CA0073', 'X-FEServer': 'SG3P274CA0014', 'x-ms-appId': 'b01a9beb-b601-4bfe-8dcf-f21ca425a387', 'x-ms-diagnostics': '2000008;reason="The token contains not enough scope to make this call.";error_category="invalid_grant"', 'X-Proxy-BackendServerStatus': '403', 'X-Proxy-RoutingCorrectness': '1', 'X-RUM-NotUpdateQueriedPath': '1', 'X-RUM-NotUpdateQueriedDbCopy': '1', 'X-RUM-Validated': '1', 'X-FirstHopCafeEFZ': 'SIN', 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains', 'Set-Cookie': 'exchangecookie=e6470e9f797343c5a329a09fbxxxxxxxx; expires=Thu, 17-Jul-2025 06:47:46 GMT; path=/; secure; HttpOnly', 'WWW-Authenticate': 'Bearer client_id="00000002-0000-0ff1-ce00-000000000000", trusted_issuers="00000001-0000-0000-c000-000000000000@*", token_types="app_asserted_user_v1 service_asserted_app_v1", error="invalid_token"', 'Date': 'Wed, 17 Jul 2024 06:47:46 GMT'} content: 

[ecederstrand]

Your output contains this error message: "The token contains not enough scope to make this call". So it's an issue with your OAuth token.

[zx2015]

Got it. Thanks

[henripaulamaki]

@zx2015 @ecederstrand What was the fix or root cause then? I have the same problem now, and I'm unaware if I am doing something wrong on the Python code side or the account settings deny the email reading?

[ecederstrand]

It's the OAuth app that hands out tokens that hasn't been granted sufficient permissions to access the data you're trying to access. The docs have suggestions on how to set up OAuth in Azure AD in different scenarios.

[henripaulamaki]

Okay, thanks - I'll look into that side of it.