Title: Users’ SharePoint Framework (SPFx) webparts may not load as expected on SharePoint Online pages
User impact: Users’ SPFx webparts may not have loaded as expected on SharePoint Online pages.
More info: Users may have seen the following error message while trying to load pages, “403-Forbidden”.
As a workaround to avoid this issue and view SPFx webparts as expected, admins could have performed the following steps:
– Navigate to portal.azure.com
– Remove the existing “Client secrets” if any exist
– Visit the API access page in the SharePoint admin center with a user that has Microsoft Entra ID admin permissions
Final status: We’ve received confirmation from users that initially reported the issue that reverting the offending update was successful and the issue is resolved.
Scope of impact: Some users trying to load SPFx webparts on SharePoint Online pages may have been impacted.
Start time: Monday, December 11, 2023, at 12:00 AM UTC
End time: Tuesday, January 9, 2024, at 6:35 PM UTC
Root cause: A recent service update that introduced a change to an authentication process resulted in a compatibility issue with SharePoint Online Client Extensibility Web Application Principals and client secrets.
Next steps:
– We’re further reviewing the service update to understand how the compatibility issue was introduced, and to understand what prevented it from being detected in our update testing and validation procedures, which will allow us to prevent similar issues in future updates.
This is the final update for the event.
