IntuneHydrationKit

0.5.1

Private/Get-GraphErrorMessage.ps1

function Get-GraphErrorMessage {
    <#
    .SYNOPSIS
        Extracts error message from Graph API error response
    .DESCRIPTION
        Internal helper function for parsing Graph API error details into a clean, readable format
    #>
    [CmdletBinding()]
    param(
        [Parameter(Mandatory = $true)]
        [System.Management.Automation.ErrorRecord]$ErrorRecord
    )

    $statusCode = $null
    $errorCode = $null
    $errorMessage = $null

    # Try to get HTTP status code
    if ($ErrorRecord.Exception.Response.StatusCode) {
        $statusCode = [int]$ErrorRecord.Exception.Response.StatusCode
    }

    # Try to parse the JSON error response
    $rawMessage = if ($ErrorRecord.ErrorDetails -and $ErrorRecord.ErrorDetails.Message) {
        $ErrorRecord.ErrorDetails.Message
    } else {
        $ErrorRecord.Exception.Message
    }

    # Attempt to extract error code and detail message from JSON response
    if ($rawMessage -match '"code"\s*:\s*"([^"]+)"') {
        $errorCode = $matches[1]
    }
    $detailMessage = $null
    # Use regex that handles escaped quotes inside the message value
    if ($rawMessage -match '"message"\s*:\s*"((?:[^"\\]|\\.)*)"') {
        $rawDetail = $matches[1]
        # Unescape the JSON string (convert \r\n, \", etc. to actual characters)
        $rawDetail = $rawDetail -replace '\\r\\n', ' ' -replace '\\n', ' ' -replace '\\r', ' ' -replace '\\"', '"' -replace '\\\\', '\'
        # If the unescaped message looks like JSON, try to extract the inner "Message" field
        if ($rawDetail -match '"Message"\s*:\s*"((?:[^"\\]|\\.)*)"') {
            $detailMessage = $matches[1] -replace '\\r\\n', ' ' -replace '\\n', ' ' -replace '\\"', '"'
        } elseif ($rawDetail.Length -gt 0 -and $rawDetail -ne $errorCode) {
            $detailMessage = $rawDetail
        }
        # Truncate overly long detail messages
        if ($detailMessage -and $detailMessage.Length -gt 200) {
            $detailMessage = $detailMessage.Substring(0, 200) + '...'
        }
    }

    # Build a clean error message with detail when available
    $cleanMessage = switch ($errorCode) {
        'ResourceNotFound' { 'Resource not found (may have been deleted already)' }
        'InternalServerError' { 'Server error - please retry' }
        'BadRequest' {
            if ($detailMessage -and $detailMessage -ne 'BadRequest') {
                "Invalid request - $detailMessage"
            } else {
                'Invalid request - check template format'
            }
        }
        'Forbidden' { 'Access denied - check permissions' }
        'Unauthorized' { 'Authentication failed - reconnect to Graph' }
        'TooManyRequests' { 'Rate limited - please wait and retry' }
        'ServiceUnavailable' { 'Service unavailable - please retry later' }
        default {
            if ($detailMessage) {
                "$errorCode - $detailMessage"
            } else {
                $errorCode
            }
        }
    }

    # Format: "HTTP 404: Resource not found" or just the clean message
    if ($statusCode -and $cleanMessage) {
        return "HTTP $statusCode - $cleanMessage"
    }

    if ($cleanMessage) {
        return $cleanMessage
    }

    # Fallback to truncated raw message
    if ($rawMessage.Length -gt 100) {
        return $rawMessage.Substring(0, 100) + '...'
    }

    return $rawMessage
}