PowerShell

Azure REST API Access Token

See more Azure OAuth2 Examples

Demonstrates how to request an Azure REST API OAUTH2 access token.

Note: In order to access resources a Service Principal needs to be created in your Tenant. It is really convenient to do it via AZ CLI:

az ad sp create-for-rbac --name [APP_NAME] --password [CLIENT_SECRET]

PowerShell

Add-Type -Path "C:\chilkat\ChilkatDotNet47-x64\ChilkatDotNet47.dll"

$success = $false

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

$rest = New-Object Chilkat.Rest

# URL: https://login.microsoftonline.com/TENANT_ID/oauth2/token
$bTls = $true
$port = 443
$bAutoReconnect = $true
$success = $rest.Connect("login.microsoftonline.com",$port,$bTls,$bAutoReconnect)
if ($success -ne $true) {
    $("ConnectFailReason: " + $rest.ConnectFailReason)
    $($rest.LastErrorText)
    exit
}

# Add query params to the request.
$rest.AddQueryParam("grant_type","client_credentials")
$rest.AddQueryParam("client_id","APP_ID")
$rest.AddQueryParam("client_secret","CLIENT_SECRET")
# Note: The resource must match the API for which you're using the access token..
$rest.AddQueryParam("resource","https://management.azure.com/")

$strResponseBody = $rest.FullRequestFormUrlEncoded("POST","/TENANT_ID/oauth2/token")
if ($rest.LastMethodSuccess -ne $true) {
    $($rest.LastErrorText)
    exit
}

$respStatusCode = $rest.ResponseStatusCode
if ($respStatusCode -ge 400) {
    $("Response Status Code = " + $respStatusCode)
    $("Response Header:")
    $($rest.ResponseHeader)
    $("Response Body:")
    $($strResponseBody)
    exit
}

$json = New-Object Chilkat.JsonObject
$json.Load($strResponseBody)
$json.EmitCompact = $false
$($json.Emit())

# The result is an access token such as the following:

# {
#   "token_type": "Bearer",
#   "expires_in": "3600",
#   "ext_expires_in": "3600",
#   "expires_on": "1557864616",
#   "not_before": "1557860716",
#   "resource": "https://management.azure.com/",
#   "access_token": "eyJ0eXAiOiJKV1QiL ... 20UFDDOHEyUg"
# }

# We'll save this JSON to a file for other examples to use..
$json.WriteFile("qa_data/tokens/azureToken.json")