(PureBasic) Microsoft Teams OAuth2 Client Credentials Authentication

See more Microsoft Teams Examples

Demonstrates how to authenticate with OAuth 2.0 using the client credentials grant type.

Note: This example uses the new "Integrated OAuth2 Client Credentials" feature introduced in Chilkat v9.5.0.96.

Chilkat PureBasic Module Download Chilkat PureBasic Module

IncludeFile "CkHttpResponse.pb"
IncludeFile "CkHttp.pb"
IncludeFile "CkJsonObject.pb"

Procedure ChilkatExample()

    ; This requires the Chilkat API to have been previously unlocked.
    ; See Global Unlock Sample for sample code.

    success.i
    http.i = CkHttp::ckCreate()
    If http.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; Provide the information needed for Chilkat to automatically fetch the OAuth2.0 
    ; access token as needed.
    ; This is the new "Integrated OAuth2 Client Credentials" feature introduced in Chilkat v9.5.0.96.  
    jsonOAuthCC.i = CkJsonObject::ckCreate()
    If jsonOAuthCC.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; --------------------------------------------------------------------------------------------------------
    ; You'll need to have registered an app in Azure beforehand.
    ; 
    ; Note: Creating a Team requires the following Application permissions:
    ; Team.Create, Teamwork.Migrate.All, Group.ReadWrite.All**, Directory.ReadWrite.All**
    ; 
    ; See How to Create an Azure App Registration for OAuth 2.0 Client Credentials
    ; --------------------------------------------------------------------------------------------------------

    ; Use the values from your App Registration in Azure.
    CkJsonObject::ckUpdateString(jsonOAuthCC,"client_id","e1cd2318-xxxx-4916-bfd6-xxxxxxxxxxxx")
    CkJsonObject::ckUpdateString(jsonOAuthCC,"client_secret","K.d8Q~RoJxxxxvCj_u_xxxxxxxxxxxxxxxxxxxxx")

    ; You'll always use this scope for client credentials, because the allowed actions
    ; are determined by the App Permissions defined when you registered the app in Azure.
    CkJsonObject::ckUpdateString(jsonOAuthCC,"scope","https://graph.microsoft.com/.default")

    ; The token endpoint includes your tenant ID.  Use your tenant ID (not the tenant ID shown here).
    CkJsonObject::ckUpdateString(jsonOAuthCC,"token_endpoint","https://login.microsoftonline.com/112d7ed6-71bf-4eba-a866-738364321bfc/oauth2/v2.0/token")

    ; Provide the OAuth2 information. Chilkat will use this information to automatically fetch the OAuth2 access token as needed,
    CkHttp::setCkAuthToken(http, CkJsonObject::ckEmit(jsonOAuthCC))

    ; ------------------------------------------------------------------------------
    ; To create a Microsoft Team, we want to send an HTTP request like the following:
    ; 
    ; Note: The following is the minimal JSON for a request using Applicaton permissions (i.e. the access token retrieved using the client credentials grant).
    ; 
    ; POST https://graph.microsoft.com/v1.0/teams
    ; Content-Type: application/json
    ; 
    ; {
    ;    "template@odata.bind":"https://graph.microsoft.com/v1.0/teamsTemplates('standard')",
    ;    "displayName":"My Sample Team",
    ;    "description":"My Sample Teams Description",
    ;    "members":[
    ;       {
    ;          "@odata.type":"#microsoft.graph.aadUserConversationMember",
    ;          "roles":[
    ;             "owner"
    ;          ],
    ;          "user@odata.bind":"https://graph.microsoft.com/v1.0/users('0040b377-61d8-43db-94f5-81374122dc7e')"
    ;       }
    ;    ]
    ; }

    json.i = CkJsonObject::ckCreate()
    If json.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkJsonObject::ckUpdateString(json,Chr(34) + "template@odata.bind" + Chr(34),"https://graph.microsoft.com/v1.0/teamsTemplates('standard')")
    CkJsonObject::ckUpdateString(json,"displayName","My Sample Team")
    CkJsonObject::ckUpdateString(json,"description","My Sample Teams Description")
    CkJsonObject::ckUpdateString(json,"members[0]." + Chr(34) + "@odata.type" + Chr(34),"#microsoft.graph.aadUserConversationMember")
    CkJsonObject::ckUpdateString(json,"members[0].roles[0]","owner")
    CkJsonObject::ckUpdateString(json,"members[0]." + Chr(34) + "user@odata.bind" + Chr(34),"https://graph.microsoft.com/v1.0/users('4ee732c3-322e-4a6b-b729-2fd1eb5c6004')")

    CkJsonObject::setCkEmitCompact(json, 0)
    Debug CkJsonObject::ckEmit(json)

    CkHttp::ckSetRequestHeader(http,"Content-type","application/json")

    resp.i = CkHttp::ckPostJson3(http,"https://graph.microsoft.com/v1.0/teams","application/json",json)
    If CkHttp::ckLastMethodSuccess(http) = 0
        Debug CkHttp::ckLastErrorText(http)
        CkHttp::ckDispose(http)
        CkJsonObject::ckDispose(jsonOAuthCC)
        CkJsonObject::ckDispose(json)
        ProcedureReturn
    EndIf

    ; A successful response is indicated by a 202 response status code and an empty response body.
    Debug "Response Status Code: " + Str(CkHttpResponse::ckStatusCode(resp))
    Debug "Response Body:"
    Debug CkHttpResponse::ckBodyStr(resp)

    If CkHttpResponse::ckStatusCode(resp) >= 400
        Debug "Response Header:"
        Debug CkHttpResponse::ckHeader(resp)
        Debug "Failed."
    EndIf

    CkHttpResponse::ckDispose(resp)



    CkHttp::ckDispose(http)
    CkJsonObject::ckDispose(jsonOAuthCC)
    CkJsonObject::ckDispose(json)


    ProcedureReturn
EndProcedure