Objective-C

Azure REST API Access Token

See more Azure OAuth2 Examples

Demonstrates how to request an Azure REST API OAUTH2 access token.

Note: In order to access resources a Service Principal needs to be created in your Tenant. It is really convenient to do it via AZ CLI:

az ad sp create-for-rbac --name [APP_NAME] --password [CLIENT_SECRET]

Objective-C

#import <CkoRest.h>
#import <NSString.h>
#import <CkoJsonObject.h>

BOOL success = NO;

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

CkoRest *rest = [[CkoRest alloc] init];

// URL: https://login.microsoftonline.com/TENANT_ID/oauth2/token
BOOL bTls = YES;
int port = 443;
BOOL bAutoReconnect = YES;
success = [rest Connect: @"login.microsoftonline.com" port: [NSNumber numberWithInt: port] tls: bTls autoReconnect: bAutoReconnect];
if (success != YES) {
    NSLog(@"%@%d",@"ConnectFailReason: ",[rest.ConnectFailReason intValue]);
    NSLog(@"%@",rest.LastErrorText);
    return;
}

// Add query params to the request.
[rest AddQueryParam: @"grant_type" value: @"client_credentials"];
[rest AddQueryParam: @"client_id" value: @"APP_ID"];
[rest AddQueryParam: @"client_secret" value: @"CLIENT_SECRET"];
// Note: The resource must match the API for which you're using the access token..
[rest AddQueryParam: @"resource" value: @"https://management.azure.com/"];

NSString *strResponseBody = [rest FullRequestFormUrlEncoded: @"POST" uriPath: @"/TENANT_ID/oauth2/token"];
if (rest.LastMethodSuccess != YES) {
    NSLog(@"%@",rest.LastErrorText);
    return;
}

int respStatusCode = [rest.ResponseStatusCode intValue];
if (respStatusCode >= 400) {
    NSLog(@"%@%d",@"Response Status Code = ",respStatusCode);
    NSLog(@"%@",@"Response Header:");
    NSLog(@"%@",rest.ResponseHeader);
    NSLog(@"%@",@"Response Body:");
    NSLog(@"%@",strResponseBody);
    return;
}

CkoJsonObject *json = [[CkoJsonObject alloc] init];
[json Load: strResponseBody];
json.EmitCompact = NO;
NSLog(@"%@",[json Emit]);

// The result is an access token such as the following:

// {
//   "token_type": "Bearer",
//   "expires_in": "3600",
//   "ext_expires_in": "3600",
//   "expires_on": "1557864616",
//   "not_before": "1557860716",
//   "resource": "https://management.azure.com/",
//   "access_token": "eyJ0eXAiOiJKV1QiL ... 20UFDDOHEyUg"
// }

// We'll save this JSON to a file for other examples to use..
[json WriteFile: @"qa_data/tokens/azureToken.json"];