JavaScript

Azure REST API Access Token

See more Azure OAuth2 Examples

Demonstrates how to request an Azure REST API OAUTH2 access token.

Note: In order to access resources a Service Principal needs to be created in your Tenant. It is really convenient to do it via AZ CLI:

az ad sp create-for-rbac --name [APP_NAME] --password [CLIENT_SECRET]

JavaScript

var success = false;

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

var rest = new CkRest();

// URL: https://login.microsoftonline.com/TENANT_ID/oauth2/token
var bTls = true;
var port = 443;
var bAutoReconnect = true;
success = rest.Connect("login.microsoftonline.com",port,bTls,bAutoReconnect);
if (success !== true) {
    console.log("ConnectFailReason: " + rest.ConnectFailReason);
    console.log(rest.LastErrorText);
    return;
}

// Add query params to the request.
rest.AddQueryParam("grant_type","client_credentials");
rest.AddQueryParam("client_id","APP_ID");
rest.AddQueryParam("client_secret","CLIENT_SECRET");
// Note: The resource must match the API for which you're using the access token..
rest.AddQueryParam("resource","https://management.azure.com/");

var strResponseBody = rest.FullRequestFormUrlEncoded("POST","/TENANT_ID/oauth2/token");
if (rest.LastMethodSuccess !== true) {
    console.log(rest.LastErrorText);
    return;
}

var respStatusCode = rest.ResponseStatusCode;
if (respStatusCode >= 400) {
    console.log("Response Status Code = " + respStatusCode);
    console.log("Response Header:");
    console.log(rest.ResponseHeader);
    console.log("Response Body:");
    console.log(strResponseBody);
    return;
}

var json = new CkJsonObject();
json.Load(strResponseBody);
json.EmitCompact = false;
console.log(json.Emit());

// The result is an access token such as the following:

// {
//   "token_type": "Bearer",
//   "expires_in": "3600",
//   "ext_expires_in": "3600",
//   "expires_on": "1557864616",
//   "not_before": "1557860716",
//   "resource": "https://management.azure.com/",
//   "access_token": "eyJ0eXAiOiJKV1QiL ... 20UFDDOHEyUg"
// }

// We'll save this JSON to a file for other examples to use..
json.WriteFile("qa_data/tokens/azureToken.json");