(PHP Extension) Office365 POP3 with Client Credentials

See more Office365 Examples

Demonstrates how to interact with the Office365 POP3 server using OAuth2 client credentials. This example uses a new feature available starting in Chilkat v9.5.0.97, which is to provide the client ID, client secret, and tenant ID to Chilkat, and internally Chilkat will fetch OAuth2 access token via client credentials as necessary. Therefore, it is no longer necessary for the application to explicitly fetch the OAuth2 access token beforehand.

Note: This requires the Azure Entra ID application to be configured for client credentials as detailed in this guide: Office365 App Setup for SMTP, POP, IMAP OAuth2 Client Credentials

Note: This example requires Chilkat v9.5.0.97 or greater.

Chilkat PHP Downloads PHP Extension for Windows, Linux, MacOS, Alpine Linux, Solaris

<?php

// The version number (9_5_0) should match version of the Chilkat extension used, omitting the micro-version number.
// For example, if using Chilkat v9.5.0.48, then include as shown here:
include("chilkat_9_5_0.php");

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// ----------------------------------------------------------------------------------------
// Important:
// Your Azure Entra ID app must be explicitly setup to allow for the OAuth2 client credentials flow.
// Please follow the detailed guide for how to do it here:
// Office365 App Setup for SMTP, POP, IMAP OAuth2 Client Credentials
// 
// Note: Your registered App must have the SMTP.SendAsApp permission.
// ----------------------------------------------------------------------------------------

$json = new CkJsonObject();

// Use your App's actual client ID here:
$json->UpdateString('client_id','2871da2c-8176-4b7f-869b-2311aa82e743');

// Use your App's actual client secret here:
$json->UpdateString('client_secret','2hu9Q~r5QuryUcEkNbg1btLtnfU1VUXzhSCG6brH');

// Use this specific scope.
$json->UpdateString('scope','https://outlook.office365.com/.default');

// Replace the tenant ID part of the URL with your tenant ID.
$json->UpdateString('token_endpoint','https://login.microsoftonline.com/114d7ed6-71bf-4dbe-a866-748364121bf2/oauth2/v2.0/token');

$mailman = new CkMailMan();

$mailman->put_MailHost('outlook.office365.com');
$mailman->put_MailPort(995);
$mailman->put_PopSsl(true);

// Use your O365 email address here.
$mailman->put_PopUsername('OFFICE365_EMAIL_ADDRESS');

// When using OAuth2 authentication, leave the password empty.
$mailman->put_PopPassword('');

// Here is where we use a new feature introduced in Chilkat v9.5.0.97
// Instead of providing a previously fetched OAuth2 access token, we instead provide the information (above)
// required for Chilkat to automatically fetch the access token via client credentials.
$mailman->put_OAuth2AccessToken($json->emit());

// Make the TLS connection to the outlook.office365.com POP3 server.
$success = $mailman->Pop3Connect();
if ($success != true) {
    print $mailman->lastErrorText() . "\n";
    exit;
}

// Authenticate using XOAUTH2
$success = $mailman->Pop3Authenticate();
if ($success != true) {
    print $mailman->lastErrorText() . "\n";
    exit;
}

// Find out how many emails are on the server..
$numEmails = $mailman->CheckMail();
if ($numEmails < 0) {
    print $mailman->lastErrorText() . "\n";
    exit;
}

// Examine the POP3 session log:
print $mailman->pop3SessionLog() . "\n";

// The POP3 session log will look something like this:

// **** Connected to outlook.office365.com:995
// < +OK The Microsoft Exchange POP3 service is ready. [QwBIADIAUABSADEAOABD...YwBvAG0A]
// > AUTH XOAUTH2
// < + 
// > <base64 string in XOAUTH2 format>
// < +OK User successfully authenticated.
// > STAT
// < +OK 3 375302

// End the POP3 session and close the connection to the GMail server.
$success = $mailman->Pop3EndSession();
if ($success != true) {
    print $mailman->lastErrorText() . "\n";
    exit;
}

print 'Finished.' . "\n";

?>