Update detectProvider and AdaptativeCards to handle new Teams Webhook relying on Power Automate

[lucaswitvoet]

Description:
The detectProvider function is currently unable to detect Power Automate URLs for Microsoft Teams, as it doesn't include URLs from the Power Platform. A new change to webhooks relying on "Workflows", this has introduced URLs with the domain environment.api.powerplatform.com for Power Automate services.

This change results in the function not correctly identifying these URLs, and they are categorized under generic, when they should instead be detected as teams.

Current Code:

function detectProvider(webhook) {
    const url = webhook.toLowerCase();
    if (url.includes('discord.com/api/webhooks') || url.includes('discordapp.com/api/webhooks')) {
        return 'discord';
    } else if (url.includes('hooks.slack.com')) {
        return 'slack';
    } else if (url.includes('webhook.office.com') || url.includes('.webhook.office.com')) {
        return 'teams';
    }
    return 'generic';
}

Suggested Change:

To correctly identify Power Automate webhooks, modify the condition for Teams to also check for environment.api.powerplatform.com. Here’s the updated code snippet:

function detectProvider(webhook) {
    const url = webhook.toLowerCase();
    if (url.includes('discord.com/api/webhooks') || url.includes('discordapp.com/api/webhooks')) {
        return 'discord';
    } else if (url.includes('hooks.slack.com')) {
        return 'slack';
    } else if (url.includes('webhook.office.com') || url.includes('.webhook.office.com') || url.includes('environment.api.powerplatform.com')) {
        return 'teams';
    }
    return 'generic';
}

Impact:

This fix will ensure that URLs from Power Automate are correctly recognized as Teams webhooks, avoiding the misclassification as generic.

[lucaswitvoet]

I encountered another issue while testing TokenFlare with Microsoft Teams Power Automate webhooks and wanted to share the solution.

Problem:
When using Microsoft Teams Power Automate webhooks, TokenFlare was throwing the following error:

AdaptiveCards.AdaptiveSerializationException: Property 'type' must be 'AdaptiveCard'

Root Cause:
The formatTeams() function was sending a MessageCard format (legacy), but Power Automate webhooks require the newer Adaptive Card format.

Solution:
Modified the formatTeams() function in worker.js (line ~548) to use Adaptive Card format:

/**
 * Microsoft Teams format: Adaptive Card (compatible Power Automate)
 */
function formatTeams(message) {
  const formattedMessage = message.replace(/\n/g, '\n\n');
  return {
    "type": "message",
    "attachments": [{
      "contentType": "application/vnd.microsoft.card.adaptive",
      "contentUrl": null,
      "content": {
        "type": "AdaptiveCard",
        "$schema": "http://adaptivecards.io/schemas/adaptive-card.json",
        "version": "1.4",
        "body": [
          {
            "type": "TextBlock",
            "text": "🎣 TokenFlare Alert",
            "weight": "bolder",
            "size": "large",
            "color": "attention"
          },
          {
            "type": "TextBlock",
            "text": formattedMessage,
            "wrap": true,
            "spacing": "medium",
            "separator": true
          }
        ]
      }
    }]
  };
}

Tested with: Power Automate webhook (via environment.api.powerplatform.com)

Not tested with Traditional Incoming Webhooks still work with MessageCard format

It worked for me. Thanks for the great tool!

[gladstomych-jumpsec]

Hi @lucaswitvoet - Thank you for the issue - I'll look into it soon. Truth be told we never tested for Teams / PowerAutomate webhooks before 1.0 because the UI for setting up hooks these days are like a maze to me! Will review your comments and merge if it makes sense to us.