(PHP ActiveX) Azure REST API Access Token

Demonstrates how to request an Azure REST API OAUTH2 access token.

Note: In order to access resources a Service Principal needs to be created in your Tenant. It is really convenient to do it via AZ CLI:

az ad sp create-for-rbac --name [APP_NAME] --password [CLIENT_SECRET]

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Rest')
$rest = new COM("Chilkat.Rest");

// URL: https://login.microsoftonline.com/TENANT_ID/oauth2/token
$bTls = 1;
$port = 443;
$bAutoReconnect = 1;
$success = $rest->Connect('login.microsoftonline.com',$port,$bTls,$bAutoReconnect);
if ($success != 1) {
    print 'ConnectFailReason: ' . $rest->ConnectFailReason . "\n";
    print $rest->LastErrorText . "\n";
    exit;
}

// Add query params to the request.
$rest->AddQueryParam('grant_type','client_credentials');
$rest->AddQueryParam('client_id','APP_ID');
$rest->AddQueryParam('client_secret','CLIENT_SECRET');
// Note: The resource must match the API for which you're using the access token..
$rest->AddQueryParam('resource','https://management.azure.com/');

$strResponseBody = $rest->fullRequestFormUrlEncoded('POST','/TENANT_ID/oauth2/token');
if ($rest->LastMethodSuccess != 1) {
    print $rest->LastErrorText . "\n";
    exit;
}

$respStatusCode = $rest->ResponseStatusCode;
if ($respStatusCode >= 400) {
    print 'Response Status Code = ' . $respStatusCode . "\n";
    print 'Response Header:' . "\n";
    print $rest->ResponseHeader . "\n";
    print 'Response Body:' . "\n";
    print $strResponseBody . "\n";
    exit;
}

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.JsonObject')
$json = new COM("Chilkat.JsonObject");
$json->Load($strResponseBody);
$json->EmitCompact = 0;
print $json->emit() . "\n";

// The result is an access token such as the following:

// {
//   "token_type": "Bearer",
//   "expires_in": "3600",
//   "ext_expires_in": "3600",
//   "expires_on": "1557864616",
//   "not_before": "1557860716",
//   "resource": "https://management.azure.com/",
//   "access_token": "eyJ0eXAiOiJKV1QiL ... 20UFDDOHEyUg"
// }

// We'll save this JSON to a file for other examples to use..
$json->WriteFile('qa_data/tokens/azureToken.json');

?>