You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Summary
Replaces all `-user $request.headers.'x-ms-client-principal'` calls with
`-Headers $Request.Headers` in `Invoke-ExecUpdateDriftDeviation` for
consistent logging behavior.
# Description
`Write-LogMessage` handles IDP detection, AAD API client resolution,
and IP address capture from `x-forwarded-for` when given the full
`-Headers` object. Passing `-user` with the raw base64 principal skips
all of that. All 9 `Write-LogMessage` calls in the file now use
`-Headers $Request.Headers` to match the convention used elsewhere.
Copy file name to clipboardExpand all lines: Modules/CIPPCore/Public/Entrypoints/HTTP Functions/Tenant/Standards/Invoke-ExecUpdateDriftDeviation.ps1
+9-9Lines changed: 9 additions & 9 deletions
Original file line number
Diff line number
Diff line change
@@ -9,7 +9,7 @@ function Invoke-ExecUpdateDriftDeviation {
9
9
param($Request,$TriggerMetadata)
10
10
11
11
$APIName=$TriggerMetadata.FunctionName
12
-
Write-LogMessage-user $request.headers.'x-ms-client-principal'-API $APINAME-message 'Accessed this API'-Sev 'Debug'
12
+
Write-LogMessage-Headers $Request.Headers-API $APINAME-message 'Accessed this API'-Sev 'Debug'
13
13
14
14
try {
15
15
$TenantFilter=$Request.Body.TenantFilter
@@ -25,7 +25,7 @@ function Invoke-ExecUpdateDriftDeviation {
25
25
success=$true
26
26
result="All drift customizations removed for tenant $TenantFilter"
27
27
})
28
-
Write-LogMessage-tenant $TenantFilter-user $request.headers.'x-ms-client-principal'-API $APINAME-message "Removed all drift customizations for tenant $TenantFilter"-Sev 'Info'
28
+
Write-LogMessage-tenant $TenantFilter-Headers $Request.Headers-API $APINAME-message "Removed all drift customizations for tenant $TenantFilter"-Sev 'Info'
29
29
} else {
30
30
$Deviations=$Request.Body.deviations
31
31
$Reason=$Request.Body.reason
@@ -39,7 +39,7 @@ function Invoke-ExecUpdateDriftDeviation {
39
39
success=$true
40
40
result=$Result
41
41
}
42
-
Write-LogMessage-tenant $TenantFilter-user $request.headers.'x-ms-client-principal'-API $APINAME-message "Updated drift deviation status for $($Deviation.standardName) to $($Deviation.status) with reason: $Reason"-Sev 'Info'
42
+
Write-LogMessage-tenant $TenantFilter-Headers $Request.Headers-API $APINAME-message "Updated drift deviation status for $($Deviation.standardName) to $($Deviation.status) with reason: $Reason"-Sev 'Info'
@@ -62,7 +62,7 @@ function Invoke-ExecUpdateDriftDeviation {
62
62
}
63
63
}
64
64
if (-not$MatchedTemplate) {
65
-
Write-LogMessage-tenant $TenantFilter-user $request.headers.'x-ms-client-principal'-API $APINAME-message "Could not find IntuneTemplate $TemplateId in drift standard settings for remediation"-Sev 'Warn'
65
+
Write-LogMessage-tenant $TenantFilter-Headers $Request.Headers-API $APINAME-message "Could not find IntuneTemplate $TemplateId in drift standard settings for remediation"-Sev 'Warn'
Write-LogMessage-tenant $TenantFilter-user $request.headers.'x-ms-client-principal'-API $APINAME-message "Deleted Policy with ID $($ID)"-Sev 'Info'
151
+
Write-LogMessage-tenant $TenantFilter-Headers $Request.Headers-API $APINAME-message "Deleted Policy with ID $($ID)"-Sev 'Info'
152
152
} else {
153
153
"could not find policy with ID $($ID)"
154
-
Write-LogMessage-tenant $TenantFilter-user $request.headers.'x-ms-client-principal'-API $APINAME-message "Could not find Policy with ID $($ID) to delete for remediation"-sev 'Warn'
154
+
Write-LogMessage-tenant $TenantFilter-Headers $Request.Headers-API $APINAME-message "Could not find Policy with ID $($ID) to delete for remediation"-sev 'Warn'
155
155
}
156
156
157
157
@@ -162,7 +162,7 @@ function Invoke-ExecUpdateDriftDeviation {
162
162
success=$false
163
163
error=$_.Exception.Message
164
164
}
165
-
Write-LogMessage-tenant $TenantFilter-user $request.headers.'x-ms-client-principal'-API $APINAME-message "Failed to update drift deviation for $($Deviation.standardName): $($_.Exception.Message)"-Sev 'Error'
165
+
Write-LogMessage-tenant $TenantFilter-Headers $Request.Headers-API $APINAME-message "Failed to update drift deviation for $($Deviation.standardName): $($_.Exception.Message)"-Sev 'Error'
166
166
}
167
167
}
168
168
}
@@ -175,7 +175,7 @@ function Invoke-ExecUpdateDriftDeviation {
175
175
})
176
176
177
177
} catch {
178
-
Write-LogMessage-user $request.headers.'x-ms-client-principal'-API $APINAME-message "Failed to update drift deviation: $($_.Exception.Message)"-Sev 'Error'
178
+
Write-LogMessage-Headers $Request.Headers-API $APINAME-message "Failed to update drift deviation: $($_.Exception.Message)"-Sev 'Error'
0 commit comments