PureBasic

Microsoft Teams OAuth2 Client Credentials Authentication

See more Microsoft Teams Examples

Demonstrates how to authenticate with OAuth 2.0 using the client credentials grant type. PureBasic

IncludeFile "CkHttpResponse.pb"
IncludeFile "CkHttp.pb"
IncludeFile "CkJsonObject.pb"

Procedure ChilkatExample()

    success.i = 0

    ; This requires the Chilkat API to have been previously unlocked.
    ; See Global Unlock Sample for sample code.

    http.i = CkHttp::ckCreate()
    If http.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; Provide the information needed for Chilkat to automatically fetch the OAuth2.0 
    ; access token as needed.
    ; This is the new "Integrated OAuth2 Client Credentials" feature introduced in Chilkat v9.5.0.96.  
    jsonOAuthCC.i = CkJsonObject::ckCreate()
    If jsonOAuthCC.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; --------------------------------------------------------------------------------------------------------
    ; You'll need to have registered an app in Azure beforehand.
    ; 
    ; Note: Creating a Team requires the following Application permissions:
    ; Team.Create, Teamwork.Migrate.All, Group.ReadWrite.All**, Directory.ReadWrite.All**
    ; 
    ; See How to Create an Azure App Registration for OAuth 2.0 Client Credentials
    ; --------------------------------------------------------------------------------------------------------

    ; Use the values from your App Registration in Azure.
    CkJsonObject::ckUpdateString(jsonOAuthCC,"client_id","e1cd2318-xxxx-4916-bfd6-xxxxxxxxxxxx")
    CkJsonObject::ckUpdateString(jsonOAuthCC,"client_secret","K.d8Q~RoJxxxxvCj_u_xxxxxxxxxxxxxxxxxxxxx")

    ; You'll always use this scope for client credentials, because the allowed actions
    ; are determined by the App Permissions defined when you registered the app in Azure.
    CkJsonObject::ckUpdateString(jsonOAuthCC,"scope","https://graph.microsoft.com/.default")

    ; The token endpoint includes your tenant ID.  Use your tenant ID (not the tenant ID shown here).
    CkJsonObject::ckUpdateString(jsonOAuthCC,"token_endpoint","https://login.microsoftonline.com/112d7ed6-71bf-4eba-a866-738364321bfc/oauth2/v2.0/token")

    ; Provide the OAuth2 information. Chilkat will use this information to automatically fetch the OAuth2 access token as needed,
    CkHttp::setCkAuthToken(http, CkJsonObject::ckEmit(jsonOAuthCC))

    ; ------------------------------------------------------------------------------
    ; To create a Microsoft Team, we want to send an HTTP request like the following:
    ; 
    ; Note: The following is the minimal JSON for a request using Applicaton permissions (i.e. the access token retrieved using the client credentials grant).
    ; 
    ; POST https://graph.microsoft.com/v1.0/teams
    ; Content-Type: application/json
    ; 
    ; {
    ;    "template@odata.bind":"https://graph.microsoft.com/v1.0/teamsTemplates('standard')",
    ;    "displayName":"My Sample Team",
    ;    "description":"My Sample Team�s Description",
    ;    "members":[
    ;       {
    ;          "@odata.type":"#microsoft.graph.aadUserConversationMember",
    ;          "roles":[
    ;             "owner"
    ;          ],
    ;          "user@odata.bind":"https://graph.microsoft.com/v1.0/users('0040b377-61d8-43db-94f5-81374122dc7e')"
    ;       }
    ;    ]
    ; }

    json.i = CkJsonObject::ckCreate()
    If json.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkJsonObject::ckUpdateString(json,Chr(34) + "template@odata.bind" + Chr(34),"https://graph.microsoft.com/v1.0/teamsTemplates('standard')")
    CkJsonObject::ckUpdateString(json,"displayName","My Sample Team")
    CkJsonObject::ckUpdateString(json,"description","My Sample Team�s Description")
    CkJsonObject::ckUpdateString(json,"members[0]." + Chr(34) + "@odata.type" + Chr(34),"#microsoft.graph.aadUserConversationMember")
    CkJsonObject::ckUpdateString(json,"members[0].roles[0]","owner")
    CkJsonObject::ckUpdateString(json,"members[0]." + Chr(34) + "user@odata.bind" + Chr(34),"https://graph.microsoft.com/v1.0/users('4ee732c3-322e-4a6b-b729-2fd1eb5c6004')")

    CkJsonObject::setCkEmitCompact(json, 0)
    Debug CkJsonObject::ckEmit(json)

    CkHttp::ckSetRequestHeader(http,"Content-type","application/json")

    resp.i = CkHttpResponse::ckCreate()
    If resp.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkHttp::ckHttpJson(http,"POST","https://graph.microsoft.com/v1.0/teams",json,"application/json",resp)
    If success = 0
        Debug CkHttp::ckLastErrorText(http)
        CkHttp::ckDispose(http)
        CkJsonObject::ckDispose(jsonOAuthCC)
        CkJsonObject::ckDispose(json)
        CkHttpResponse::ckDispose(resp)
        ProcedureReturn
    EndIf

    ; A successful response is indicated by a 202 response status code and an empty response body.
    Debug "Response Status Code: " + Str(CkHttpResponse::ckStatusCode(resp))
    Debug "Response Body:"
    Debug CkHttpResponse::ckBodyStr(resp)

    If CkHttpResponse::ckStatusCode(resp) >= 400
        Debug "Response Header:"
        Debug CkHttpResponse::ckHeader(resp)
        Debug "Failed."
    EndIf



    CkHttp::ckDispose(http)
    CkJsonObject::ckDispose(jsonOAuthCC)
    CkJsonObject::ckDispose(json)
    CkHttpResponse::ckDispose(resp)


    ProcedureReturn
EndProcedure