(PowerBuilder) OAuth2 for GMail using a Service Account Key

Demonstrates how to use GMail with OAuth2 for a Google Service Account. The 1st step is to obtain a temporary access token from the Google OAuth 2.0 Authorization Server. This can be accomplished using Chilkat HTTP.

Once the access token is obtained, it may be used in IMAP XOAUTH2 authentication. The access token may be used while it remains valid to send as many emails as desired. Once it expires, a new access token needs to be obtained (using the same procedure).

Note: This is for OAuth2 using Google Service account keys.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

integer li_rc
oleobject loo_Cert
integer li_Success
string ls_Iss
string ls_Scope
string ls_Sub
integer li_NumSec
oleobject loo_Http
string ls_AccessToken
oleobject loo_Imap

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// --------------------------------------------------------------------
// Important:  In most cases, this example is not what you are looking for.
// This example is for OAuth2 using a Google Service Account Key.
// 
// It is more likely that the example you actually need is here:
// Get GMail IMAP OAuth2 Access Token 
// --------------------------------------------------------------------

// When a service account (Client ID) is created at https://code.google.com/apis/console/
// Google will generate a P12 key.  This is a PKCS12 (PFX) file that you will download
// and save.  The password to access the contents of this file is "notasecret".
// NOTE: The Chilkat Pfx API provides the ability to load a PFX/P12 and re-save
// with a different password.

// Begin by loading the downloaded .p12 into a Chilkat certificate object:
loo_Cert = create oleobject
// Use "Chilkat_9_5_0.Cert" for versions of Chilkat < 10.0.0
li_rc = loo_Cert.ConnectToNewObject("Chilkat.Cert")
if li_rc < 0 then
    destroy loo_Cert
    MessageBox("Error","Connecting to COM object failed")
    return
end if
li_Success = loo_Cert.LoadPfxFile("/myDir/API Project-1c43a291e2a1-notasecret.p12","notasecret")
if li_Success <> 1 then
    Write-Debug loo_Cert.LastErrorText
    destroy loo_Cert
    return
end if

// The next (and final) step is to request the access token.  Chilkat internally
// does all the work of forming the JWT header and JWT claim set, encoding and
// signing the JWT, and sending the access token request.
// The application need only provide the inputs: The iss, scope(s), sub, and the
// desired duration with a max of 3600 seconds (1 hour).
// 
// Each of these inputs is defined as follows 
// (see https://developers.google.com/accounts/docs/OAuth2ServiceAccount
// iss: The email address of the service account.
// scope: A space-delimited list of the permissions that the application requests.
// sub: The email address of the user for which the application is requesting delegated access.
//      The sub may be empty if there is no delegation. (This is typical.)
// numSec: The number of seconds for which the access token will be valid (max 3600).

ls_Iss = "761326798069-r5mljlln1rd4lrbhg75efgigp36m78j5@developer.gserviceaccount.com"
ls_Scope = "https://mail.google.com/"
ls_Sub = ""
li_NumSec = 3600

loo_Http = create oleobject
// Use "Chilkat_9_5_0.Http" for versions of Chilkat < 10.0.0
li_rc = loo_Http.ConnectToNewObject("Chilkat.Http")

ls_AccessToken = loo_Http.G_SvcOauthAccessToken(ls_Iss,ls_Scope,ls_Sub,li_NumSec,loo_Cert)
if loo_Http.LastMethodSuccess <> 1 then
    Write-Debug loo_Http.LastErrorText
    destroy loo_Cert
    destroy loo_Http
    return
else
    Write-Debug "access token: " + ls_AccessToken
end if

// Now that we have the access token, it may be used to authenticate via XOAUTH2 with GMail:

loo_Imap = create oleobject
// Use "Chilkat_9_5_0.Imap" for versions of Chilkat < 10.0.0
li_rc = loo_Imap.ConnectToNewObject("Chilkat.Imap")

// GMail's IMAP service uses SSL and port 993.
loo_Imap.Ssl = 1
loo_Imap.Port = 993

// Connect to the GMail IMAP server.
li_Success = loo_Imap.Connect("imap.gmail.com")
if li_Success <> 1 then
    Write-Debug loo_Imap.LastErrorText
    destroy loo_Cert
    destroy loo_Http
    destroy loo_Imap
    return
end if

// Indicate that XOAUTH2 authentication is to be used:
loo_Imap.AuthMethod = "XOAUTH2"

// Login
// The username must be the email address used for the "sub" argument when getting
// the access token.  Instead of using a password, pass the access token in the 2nd argument:
li_Success = loo_Imap.Login("user@your-domain.com",ls_AccessToken)
if li_Success <> 1 then
    Write-Debug loo_Imap.LastErrorText
else
    Write-Debug "Successfully authenticate with GMail IMAP using XOAUTH2!"
end if



destroy loo_Cert
destroy loo_Http
destroy loo_Imap