Bot sample do not have authenticate flow completely implemented

[diegoriera]

https://github.com/OfficeDev/Microsoft-Teams-Samples/tree/main/samples/bot-conversation-quickstart/python

OAuth flow is sending this reques to bot however, it is not implemented, and bot is returning http error 501 Not Implemented.
{
"name": "signin/verifyState",
"type": "invoke",
"timestamp": "2025-05-12T17:10:15.235Z",
"localTimestamp": "2025-05-12T18:10:15.235+01:00",
"id": "f:708ee6f8-3962-2c41-d785-db672f5fc664",
"channelId": "msteams",
"serviceUrl": "https://smba.trafficmanager.net/amer/scrubbed/",
"from": {
"id": "29:1kzjmf2sCedLi805kG9YvzZ58vt16IoePzt8-OIgujNI9nvFBWQG84fD_z21LjXtLyt-r72mwhpDoQY83nIkMgw",
"name": "User1",
"aadObjectId": "scrubbed"
},
"conversation": {
"conversationType": "personal",
"tenantId": "scrubbed",
"id": "a:1XMhwFV_JXkxvFggC2fqR-caKjoFXR3qgClLRRotsJ2xhEMxMFMecNcN5k8A_7FTWSc89i0dLFCXp6w1gqevr0mX76gD9Emf8TxRUqBEh_kB2cALjcOfj5wKZPoaorWZ_"
},
"recipient": {
"id": "28:scrubbed",
"name": "Name"
},
"entities": [
{
"locale": "en-US",
"country": "US",
"platform": "Web",
"timezone": "Europe/London",
"type": "clientInfo"
}
],
"channelData": {
"tenant": {
"id": "scrubbed"
},
"source": {
"name": "message"
},
"legacy": {
"replyToId": "1:140QZdtbV8-AL8CeGqvV6tcsKhmppcbN3Q7hQP8zwmkY"
}
},
"replyToId": "1747069807492",
"value": {
"state": "142433"
},
"locale": "en-US",
"localTimezone": "Europe/London"
}

[m365-agent-toolkit-assistant]

👋 Hi @diegoriera,

Thank you for reporting this issue! We want to let you know that:

⏱️ Our team will personally review your issue
🎯 You can expect a response within 1 business day

✨ This is an AI-generated initial response
🤖 AI-Generated Preliminary Analysis:

It seems there are incomplete OAuth flows in the sample you mentioned, leading to the bot returning an HTTP 501 Not Implemented error when an OAuth invoke request is sent. Here's a step-by-step approach to address this:

1. Verify the Issue:

   • Ensure that the "signin/verifyState" handler is not implemented in the bot code.

2. Implement OAuth Flow:

   • You can follow the OAuth flow documentation to implement the necessary methods in the bot.
   • Specifically, you need to handle the "signin/verifyState" and other OAuth-related activities in your bot.

3. Utilize Existing Samples:

   • Check the following sample for a complete implementation of the OAuth flow:
     • MS Teams Bot Authentication Sample (Python)

4. Update Bot Code:

   • Ensure your bot code has handlers for the OAuth invoke activities. Here's a simplified example:

     async def on_sign_in_verify_state(self, turn_context: TurnContext):
         await turn_context.send_activity("OAuth Sign-In verification state received.")
     
     async def on_invoke_activity(self, turn_context: TurnContext):
         if turn_context.activity.name == 'signin/verifyState':
             return await self.on_sign_in_verify_state(turn_context)
         else:
             return await super().on_invoke_activity(turn_context)

5. Testing:

   • Deploy and test your bot to verify the OAuth process works end-to-end.

If you continue to face issues or need further assistance, feel free to reach out with more details about your development environment and error logs.

✨We'd love your feedback! Please take a moment to fill out our survey.

---

Note: This is an automated first response generated by AI. A human team member will review your issue and provide a more detailed response soon. We appreciate your patience!

[microsoft-github-policy-service]

Hi @@diegoriera! We will investigate and if we require further information we will reach out to you. Please use this link to escalate if you don't get replies in two working days.

Best regards, Teams Platform

[ChetanSharma-msft]

Hello @diegoriera - Thanks for raising your query.
We will look into it and let you know the updates.

[li-yu-tfs]

When using teams-ai for SSO login, while authentication succeeds and tokens are obtained normally afterward, I've encountered two critical issues:

signin/verifyState invocation breaks message endpoint
The signin/verifyState method causes the /api/message endpoint to return a 501 error. This results in the login card displaying the error:
"Unable to reach app Please try again."

Sign-in success callback not triggered
The @auth.on_sign_in_success callback function fails to execute after successful authentication, preventing expected post-login actions.

this is my code

app = Application[TurnState[ConversationState, UserState, TempState]](
ApplicationOptions(
bot_app_id=config.APP_ID,
storage=storage,
adapter=adapter, # Use the adapter instance
auth=AuthOptions(
default="graph",
auto=True,
settings={
"graph": OAuthOptions(
connection_name=config.OAUTH_CONNECTION_NAME,
title="Sign In",
text="Please log in to your account to continue — this is a one-time login and you won’t be asked again.",
end_on_invalid_message=True,
),
},
),
ai=AIOptions(
planner=planner,
enable_feedback_loop=True,
),
)
)
@ChetanSharma-msft @Meghana-MSFT @Harikrishnan-MSFT @Jegadeesh-MSFT