(Delphi ActiveX) SharePoint OAuth2 Client Credentials Authentication

See more SharePoint Online Examples

Demonstrates how to authenticate with OAuth 2.0 using the client credentials grant type. This is for SharePoint Online which is the cloud-based service provided by Microsoft as part of Office 365. (Users access SharePoint Online through a web browser, and the service is hosted on Microsoft's servers.)

Note: This example uses the new "Integrated OAuth2 Client Credentials" feature introduced in Chilkat v9.5.0.96.

Chilkat for Delphi Downloads Chilkat ActiveX DLL for Delphi Chilkat non-ActiveX DLL for Delphi * The examples here use the ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Chilkat_TLB;

...

procedure TForm1.Button1Click(Sender: TObject);
var
success: Integer;
http: TChilkatHttp;
jsonOAuthCC: TChilkatJsonObject;
sbJson: TChilkatStringBuilder;
statusCode: Integer;
jsonResp: TChilkatJsonObject;

begin
// This requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

http := TChilkatHttp.Create(Self);

// Provide the information needed for Chilkat to automatically fetch the OAuth2.0 
// access token as needed.
// This is the new "Integrated OAuth2 Client Credentials" feature introduced in Chilkat v9.5.0.96.  
jsonOAuthCC := TChilkatJsonObject.Create(Self);

// --------------------------------------------------------------------------------------------------------
// You'll need to have registered an app in Azure beforehand.
// See How to Create an Azure App Registration for OAuth 2.0 Client Credentials
// --------------------------------------------------------------------------------------------------------

// Use the values from your App Registration in Azure.
jsonOAuthCC.UpdateString('client_id','e1cd2318-xxxx-4916-bfd6-xxxxxxxxxxxx');
jsonOAuthCC.UpdateString('client_secret','K.d8Q~RoJxxxxvCj_u_xxxxxxxxxxxxxxxxxxxxx');

// You'll always use this scope for client credentials, because the allowed actions
// are determined by the App Permissions defined when you registered the app in Azure.
jsonOAuthCC.UpdateString('scope','https://graph.microsoft.com/.default');

// The token endpoint includes your tenant ID.  Use your tenant ID (not the tenant ID shown here).
jsonOAuthCC.UpdateString('token_endpoint','https://login.microsoftonline.com/112d7ed6-71bf-4eba-a866-738364321bfc/oauth2/v2.0/token');

// Provide the OAuth2 information. Chilkat will use this information to automatically fetch the OAuth2 access token as needed,
http.AuthToken := jsonOAuthCC.Emit();

// Get information about all SharePoint sites.
sbJson := TChilkatStringBuilder.Create(Self);
success := http.QuickGetSb('https://graph.microsoft.com/v1.0/sites/getAllSites',sbJson.ControlInterface);
if (success = 0) then
  begin
    Memo1.Lines.Add(http.LastErrorText);
    Exit;
  end;

statusCode := http.LastStatus;

Memo1.Lines.Add('Response status code = ' + IntToStr(statusCode));

if (statusCode <> 200) then
  begin
    Memo1.Lines.Add(sbJson.GetAsString());
    Memo1.Lines.Add('Failed.');
    Exit;
  end;

jsonResp := TChilkatJsonObject.Create(Self);
jsonResp.LoadSb(sbJson.ControlInterface);
jsonResp.EmitCompact := 0;

Memo1.Lines.Add(jsonResp.Emit());
Memo1.Lines.Add('Success.');

// Use this online tool to generate parsing code from sample JSON: 
// Generate Parsing Code from JSON
end;