(DataFlex) Microsoft Graph -- Renew Expiring Access Token (Azure AD Endpoint)

Demonstrates how to renew an expiring access token using the refresh token. This example is for renewing an access token using the Azure AD endpoint (not the Azure AD v2.0 endpoint).

An app needs to watch for the expiration of these tokens and renew the expiring access token before the refresh token expires.

This example requires Chilkat v9.5.0.67 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Use ChilkatAx-win32.pkg

Procedure Test
    Handle hoJson
    Boolean iSuccess
    Handle hoDtExpire
    Variant vReq
    Handle hoReq
    Handle hoHttp
    Variant vResp
    Handle hoResp
    Handle hoFac
    String sTemp1
    Integer iTemp1
    Boolean bTemp1

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // We previously obtained an access token and saved the JSON to a file using this example:
    // Get Access Token using Azure AD Endpoint

    // This example will examine the JSON and expiration date, and if near expiration will
    // refresh the access token.

    Get Create (RefClass(cComChilkatJsonObject)) To hoJson
    If (Not(IsComObjectCreated(hoJson))) Begin
        Send CreateComObject of hoJson
    End
    Get ComLoadFile Of hoJson "qa_data/tokens/microsoftGraphAzureAD.json" To iSuccess
    If (iSuccess <> True) Begin
        Procedure_Return
    End

    // The contents of the JSON look like this:
    // {
    //     "token_type":"Bearer",
    //     "scope": "Calendar.ReadWrite Directory.Read.All Files.ReadWrite Group.ReadWrite.All Mail.ReadWrite Mail.Send User.ReadBasic.All",
    //     "expires_in":"3599",
    //     "ext_expires_in": "0",
    //     "expires_on":"1426551729",
    //     "not_before":"1426547829",
    //     "resource":"https://graph.microsoft.com/",
    //     "access_token":"eyJ0eXAiOiJKV1QiLCJhb...",
    //     "refresh_token":"AAABAAAAvPM1KaPlrEqd...",
    //     "id_token":"eyJ0eXAiOiJKV1QiLCJhbGci..."
    // }

    // The "expires_on" value is a Unix time.
    Get Create (RefClass(cComCkDateTime)) To hoDtExpire
    If (Not(IsComObjectCreated(hoDtExpire))) Begin
        Send CreateComObject of hoDtExpire
    End
    Get ComIntOf Of hoJson "expires_on" To iTemp1
    Get ComSetFromUnixTime Of hoDtExpire False iTemp1 To iSuccess

    // If this date/time expires within 10 minutes of the current system time, refresh the token.
    Get ComExpiresWithin Of hoDtExpire 10 "minutes" To bTemp1
    If (bTemp1 <> True) Begin
        Showln "No need to refresh, the access token won't expire within the next 10 minutes."
        Procedure_Return
    End

    // OK, we need to refresh the access token by sending a POST like this:
    // 

    // 	POST https://login.microsoftonline.com/common/oauth2/token HTTP/1.1
    // 	Host: login.microsoftonline.com
    // 	Content-Type: application/x-www-form-urlencoded
    // 	Content-Length: ***
    // 
    // 	grant_type=refresh_token
    // 	&redirect_uri=http%3A%2F%2Flocalhost%3A3017%2F
    // 	&client_id=8b8539cd-7b75-427f-bef1-4a6264fd4940
    // 	&client_secret=PJW3dznGfyNSm3rM9aHeXWGKsTMepKXT1Eqy45XXdU4%3D
    // 	&refresh_token=AAABAAAAvPM1KaPlrEqdFSBzjqfTGM74--...
    // 	&resource=https%3A%2F%2Fgraph.microsoft.com%2F

    Get Create (RefClass(cComChilkatHttpRequest)) To hoReq
    If (Not(IsComObjectCreated(hoReq))) Begin
        Send CreateComObject of hoReq
    End
    Send ComAddParam To hoReq "grant_type" "refresh_token"
    Send ComAddParam To hoReq "redirect_uri" "http://localhost:3017/"
    Send ComAddParam To hoReq "client_id" "MY_AZURE_AD_APP_ID"
    Send ComAddParam To hoReq "client_secret" "MY_AZURE_AD_APP_KEY"
    Get ComStringOf Of hoJson "refresh_token" To sTemp1
    Send ComAddParam To hoReq "refresh_token" sTemp1
    Send ComAddParam To hoReq "resource" "https://graph.microsoft.com/"

    Get Create (RefClass(cComChilkatHttp)) To hoHttp
    If (Not(IsComObjectCreated(hoHttp))) Begin
        Send CreateComObject of hoHttp
    End

    Get pvComObject of hoReq to vReq
    Get ComPostUrlEncoded Of hoHttp "https://login.microsoftonline.com/common/oauth2/token" vReq To vResp
    If (IsComObject(vResp)) Begin
        Get Create (RefClass(cComChilkatHttpResponse)) To hoResp
        Set pvComObject Of hoResp To vResp
    End
    Get ComLastMethodSuccess Of hoHttp To bTemp1
    If (bTemp1 <> True) Begin
        Get ComLastErrorText Of hoHttp To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Load the JSON response.
    Get ComBodyStr Of hoResp To sTemp1
    Get ComLoad Of hoJson sTemp1 To iSuccess
    Set ComEmitCompact Of hoJson To False

    // Show the JSON response.
    Get ComEmit Of hoJson To sTemp1
    Showln sTemp1

    Get ComStatusCode Of hoResp To iTemp1
    Showln "Response status code: " iTemp1

    // If the response status code is not 200, then it's an error.
    Get ComStatusCode Of hoResp To iTemp1
    If (iTemp1 <> 200) Begin
        Procedure_Return
    End

    Send Destroy of hoResp

    // Save the refreshed access token JSON to a file for future requests.
    Get Create (RefClass(cComCkFileAccess)) To hoFac
    If (Not(IsComObjectCreated(hoFac))) Begin
        Send CreateComObject of hoFac
    End
    Get ComEmit Of hoJson To sTemp1
    Get ComWriteEntireTextFile Of hoFac "qa_data/tokens/microsoftGraphAzureAD.json" sTemp1 "utf-8" False To iSuccess


End_Procedure