Flow Lifetime validation failed

(0) Share

Report

Posted on by AllanMartins

106

Hi all, we have designed a flow, tested and it worked like a charm!

Basically, it works as an approval process, that forwards to the next agent upon approval, and so on. It does have from 3-5 approvals (depending of the case).

However, we are encountering some problems, some of the runs are reporting problems when the approver actually perform an action on it (when he hit either the Approve or Reject button at the message), it returns:

ActionFailed. An action failed. No dependent actions succeeded.

And just this week, when we had this new update on the Flow layout (where it shows a left-side menu with the error details), I was able to see the following:

{"Message":"Error from ASE:Bad key authorization token: Failed to validate token: IDX10223: Lifetime validation failed. The token is expired.\nValidTo: '05/30/2017 21:29:09'\nCurrent time: '05/30/2017 23:40:29'."}

So, when a token is generated (Response Approval Email, from Office 365 service) and one of the approvers takes a long time, does that token expire? Can we set a period for this token? Is there any workaround for this case?

thank you,

Allan

Categories:

General topics

I have the same question (0)

All responses (48)

Answers (1)

Verified answer

TravisB on at

Like (0)

Report

Hi @AllanMartins,

We are aware of this issue and are looking into a fix.

This happens on manually triggered flows. For security reasons we limit the period that the access token is live, and that's currently set to 1 hour. This period has been generally fine for most use cases until now, but new scenarios around approvals are broken by this.

In the next month or so, the limit is going to be raised to 7 days. This should help out the majority of cases trying to trigger approvals with manual triggers.

Thanks,
Travis

Was this reply helpful? Yes No
AllanMartins 106 on at

Like (0)

Report

Hi @TravisB

Thanks for the reply on this. Looking forward to see this period extended. Will there be any announcement, or should I check in the next weeks?

We have a really good use for the Flow (in combination with others services) and this feature would be crucial to get it
to work.

Thanks!

Was this reply helpful? Yes No
AllanMartins 106 on at

Like (0)

Report

Just marked your reply as the accepted solution! thanks

Was this reply helpful? Yes No
TravisB on at

Like (0)

Report

I can go ahead and bump this thread when the change is deployed.

This is a security change though and needs thorough vetting before release, so a fix is going to be several weeks out.

Thanks for reporting this issue!

Best,
Travis

Was this reply helpful? Yes No
TravisB on at

Like (0)

Report

I can go ahead and bump this thread when the change is deployed.

This is a security change though and needs thorough vetting before release, so a fix is going to be several weeks out.

Thanks for reporting this issue!

Best,
Travis

Was this reply helpful? Yes No
sergeluca 500 on at

Like (0)

Report

TravisB,

just to make sure I understand he issue; yesterday afternoon, I've created a button flow assigning an approval to a user.
This afternoon (so after 22 hours), the user approved the task; no lifetime validation error; does that mean the fix has been deployed ?

Was this reply helpful? Yes No
AllanMartins 106 on at

Like (0)

Report

Hi @sergeluca, quick question...

Have you done it using the Approvals service, or a O365-Approval Message?

I noticed that Approvals can manage it without major problems, but I see some cons with this service, in comparison with the O365 one:
- no support for Rich Text/HTML on the Body
- force the approval to be a "two-step" process (Approval respond on the message, then opens a page - where he is prompted to add a note - and then he submit his respond)
- cannot delegate an Approval

Approvals service is nice, but those 3 items is a problem for our use, so we decided to move with the O365 one for now.

regards, and thank you for adding a comment on this subject.
Allan

Was this reply helpful? Yes No
merwan on at

Like (0)

Report

Hi Allan,

Thanks for the feedback. We are adding the ability to delegate approvals within the next month and adding support for rich-text/HTML is on our backlog also, slated for a little later in the year. Could you please elaborate on why the "two-step" process is problematic? We designed a two-step process so that approvers had an opportunity to make a comment on why they either approved or rejected a particular request.

Thanks,
Merwan

Was this reply helpful? Yes No
TravisB on at

Like (0)

Report

Hi @sergeluca,

That is a good point!

It's complicated from the implementation side, but the long-short of it is that the approvals themselves will work, but after an hour attempting to call into any other connections will start to fail.

Also just got word on the fix - looks like one's ready and should be out globally by the end of next week.

Thanks,
Travis

Was this reply helpful? Yes No
AllanMartins 106 on at

Like (0)

Report

Hey, just realized that I didnt phrase it properly... The two-step approvals has some benefits too!

But as more we go with it, there is always more need to make it more flexible, e.g: In our scenario, we would like to have the ability to "just" Approve (click once, and it's done - no need to "click again"), and to "Reject With comments" (so an approver would reject and write the reason why he is rejecting.

I think that a way to let the user/dev set this up for matching different scenarios, it would add (even more) value to the tool. Overall, the service is great!! It works fine, looking forward to see the new feats coming out. We are making a massive use of the Flow/PowerApps/Sharepoint combination and we have a great experience, other than the "token timeout" (which is forcing me to manually retrigger flows with expired tokens) I see endless ways to use it - and I can see way more to go with 🙂 .

Was this reply helpful? Yes No