Azure DevOps API 无需用户即可访问

Question

Is it possible to pull work items from the DevOps API without needing a user to be logged in to get an access token every time?

I am trying to create a back-end service that pulls work items from the API every so often to generate a report. Can I just generate a one-time access key to use with that back-end service?

I've looked around the documentation, but it seemed like it all requires either a PAT or Azure Active Directory authorization/authentication.

Here's the docs for the API : Link

Answer 1

you can do something like this https://docs.microsoft.com/en-us/azure/devops/organizations/settings/manage-authorizations?toc=%2Fazure%2Fdevops%2Forganizations%2Ftoc.json&bc=%2Fazure%2Fdevops%2Forganizations%2Fbreadcrumb%2Ftoc.json&view=azure-devops and https://docs.microsoft.com/en-us/azure/devops/integrate/get-started/authentication/oauth?view=azure-devops

Basically authorize applications to use devops based on your credentials using oauth. similar to an app registration.

Thats the only way I can see without PAT and manual login each time.

Answer 2

Instead of your personal account, you could create a fake AAD user then add it to your Azure DevOps Service.

Use that account to create a Personal Access Token. Similar to Build Service account to pull source code/work items. This should be a easy way to track everything.

But the limitation here is also obvious: this needs involvement of IT department, and also causes additional costs, since every user is billed.

---

Allow personal access tokens that do not expire is not supported right now. There is a related user voice .

As an alternatively way you could use OAuth just as alphaz18 suggested. Details please refer-- Authorize access to REST APIs with OAuth 2.0