(PHP Extension) Microsoft Teams OAuth2 Client Credentials Authentication

See more Microsoft Teams Examples

Demonstrates how to authenticate with OAuth 2.0 using the client credentials grant type.

Note: This example uses the new "Integrated OAuth2 Client Credentials" feature introduced in Chilkat v9.5.0.96.

Chilkat PHP Downloads PHP Extension for Windows, Linux, MacOS, Alpine Linux, Solaris

<?php

// The version number (9_5_0) should match version of the Chilkat extension used, omitting the micro-version number.
// For example, if using Chilkat v9.5.0.48, then include as shown here:
include("chilkat_9_5_0.php");

// This requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

$http = new CkHttp();

// Provide the information needed for Chilkat to automatically fetch the OAuth2.0 
// access token as needed.
// This is the new "Integrated OAuth2 Client Credentials" feature introduced in Chilkat v9.5.0.96.  
$jsonOAuthCC = new CkJsonObject();

// --------------------------------------------------------------------------------------------------------
// You'll need to have registered an app in Azure beforehand.
// 
// Note: Creating a Team requires the following Application permissions:
// Team.Create, Teamwork.Migrate.All, Group.ReadWrite.All**, Directory.ReadWrite.All**
// 
// See How to Create an Azure App Registration for OAuth 2.0 Client Credentials
// --------------------------------------------------------------------------------------------------------

// Use the values from your App Registration in Azure.
$jsonOAuthCC->UpdateString('client_id','e1cd2318-xxxx-4916-bfd6-xxxxxxxxxxxx');
$jsonOAuthCC->UpdateString('client_secret','K.d8Q~RoJxxxxvCj_u_xxxxxxxxxxxxxxxxxxxxx');

// You'll always use this scope for client credentials, because the allowed actions
// are determined by the App Permissions defined when you registered the app in Azure.
$jsonOAuthCC->UpdateString('scope','https://graph.microsoft.com/.default');

// The token endpoint includes your tenant ID.  Use your tenant ID (not the tenant ID shown here).
$jsonOAuthCC->UpdateString('token_endpoint','https://login.microsoftonline.com/112d7ed6-71bf-4eba-a866-738364321bfc/oauth2/v2.0/token');

// Provide the OAuth2 information. Chilkat will use this information to automatically fetch the OAuth2 access token as needed,
$http->put_AuthToken($jsonOAuthCC->emit());

// ------------------------------------------------------------------------------
// To create a Microsoft Team, we want to send an HTTP request like the following:
// 
// Note: The following is the minimal JSON for a request using Applicaton permissions (i.e. the access token retrieved using the client credentials grant).
// 
// POST https://graph.microsoft.com/v1.0/teams
// Content-Type: application/json
// 
// {
//    "template@odata.bind":"https://graph.microsoft.com/v1.0/teamsTemplates('standard')",
//    "displayName":"My Sample Team",
//    "description":"My Sample Teams Description",
//    "members":[
//       {
//          "@odata.type":"#microsoft.graph.aadUserConversationMember",
//          "roles":[
//             "owner"
//          ],
//          "user@odata.bind":"https://graph.microsoft.com/v1.0/users('0040b377-61d8-43db-94f5-81374122dc7e')"
//       }
//    ]
// }

$json = new CkJsonObject();
$json->UpdateString('\'template@odata.bind\'','https://graph.microsoft.com/v1.0/teamsTemplates('standard')');
$json->UpdateString('displayName','My Sample Team');
$json->UpdateString('description','My Sample Teams Description');
$json->UpdateString('members[0].\'@odata.type\'','#microsoft.graph.aadUserConversationMember');
$json->UpdateString('members[0].roles[0]','owner');
$json->UpdateString('members[0].\'user@odata.bind\'','https://graph.microsoft.com/v1.0/users('4ee732c3-322e-4a6b-b729-2fd1eb5c6004')');

$json->put_EmitCompact(false);
print $json->emit() . "\n";

$http->SetRequestHeader('Content-type','application/json');

// resp is a CkHttpResponse
$resp = $http->PostJson3('https://graph.microsoft.com/v1.0/teams','application/json',$json);
if ($http->get_LastMethodSuccess() == false) {
    print $http->lastErrorText() . "\n";
    exit;
}

// A successful response is indicated by a 202 response status code and an empty response body.
print 'Response Status Code: ' . $resp->get_StatusCode() . "\n";
print 'Response Body:' . "\n";
print $resp->bodyStr() . "\n";

if ($resp->get_StatusCode() >= 400) {
    print 'Response Header:' . "\n";
    print $resp->header() . "\n";
    print 'Failed.' . "\n";
}


?>