(PureBasic) Office365 OAuth2 Resource Owner Password Credentials Grant for SMTP, IMAP, POP

Demonstrates how to get an OAuth2 access token for use with Office 365 in the SMTP, IMAP, and POP3 protocols using the resource owner password credentials grant.

This is a way of getting an OAuth2 access token for the O365 account you own, WITHOUT needing to grant access interactively via a browser.

Chilkat PureBasic Module Download Chilkat PureBasic Module

IncludeFile "CkHttpResponse.pb"
IncludeFile "CkHttp.pb"
IncludeFile "CkFileAccess.pb"
IncludeFile "CkHttpRequest.pb"

Procedure ChilkatExample()

    ; This example requires the Chilkat API to have been previously unlocked.
    ; See Global Unlock Sample for sample code.

    ; Get an OAuth2 access token by sending a POST like this:

    ; 	POST {tenant}/oauth2/v2.0/token
    ; 	Host: login.microsoftonline.com
    ; 	Content-Type: application/x-www-form-urlencoded
    ; 
    ; 	client_id=6731de76-14a6-49ae-97bc-6eba6914391e
    ; 	&client_secret=*****************
    ; 	&scope=user.read%20openid%20profile%20offline_access
    ; 	&username=MyUsername@myTenant.com
    ; 	&password=SuperS3cret
    ; 	&grant_type=password

    http.i = CkHttp::ckCreate()
    If http.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    req.i = CkHttpRequest::ckCreate()
    If req.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; Use the application ID for the client_id.
    ; (In Azure App Registrations, use the Application (client) ID)
    CkHttpRequest::ckAddParam(req,"client_id","CLIENT_ID")
    CkHttpRequest::ckAddParam(req,"client_secret","CLIENT_SECRET")

    CkHttpRequest::ckAddParam(req,"scope","openid profile offline_access https://outlook.office365.com/SMTP.Send https://outlook.office365.com/POP.AccessAsUser.All https://outlook.office365.com/IMAP.AccessAsUser.All")
    CkHttpRequest::ckAddParam(req,"username","my_email_address")
    CkHttpRequest::ckAddParam(req,"password","my_email_password")
    CkHttpRequest::ckAddParam(req,"grant_type","password")

    resp.i
    ; Replace "{tenant}" with your tenant ID, such as "112d7ed6-71bf-4eba-a866-738364321bfc".
    resp = CkHttp::ckPostUrlEncoded(http,"https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token",req)
    If CkHttp::ckLastMethodSuccess(http) <> 1
        Debug CkHttp::ckLastErrorText(http)
        CkHttp::ckDispose(http)
        CkHttpRequest::ckDispose(req)
        ProcedureReturn
    EndIf

    statusCode.i = CkHttpResponse::ckStatusCode(resp)
    Debug "response status code: " + Str(statusCode)
    Debug "response body:"
    Debug CkHttpResponse::ckBodyStr(resp)

    ; The successful JSON response looks like this:

    ; 
    ; {
    ;   "token_type": "Bearer",
    ;   "scope": "https://outlook.office365.com/IMAP.AccessAsUser.All https://outlook.office365.com/POP.AccessAsUser.All https://outlook.office365.com/SMTP.Send",
    ;   "expires_in": 3599,
    ;   "ext_expires_in": 3599,
    ;   "access_token": "eyJ0eX ... 62Nyw",
    ;   "refresh_token": "0.AAAA1n4t ... tNxyA",
    ;   "id_token": "eyJ0eXA ... qdIGyOYw"
    ; }

    ; Save the JSON to a file for future requests.
    If statusCode = 200
        fac.i = CkFileAccess::ckCreate()
        If fac.i = 0
            Debug "Failed to create object."
            ProcedureReturn
        EndIf

        CkFileAccess::ckWriteEntireTextFile(fac,"qa_data/tokens/office365.json",CkHttpResponse::ckBodyStr(resp),"utf-8",0)
    EndIf

    CkHttpResponse::ckDispose(resp)



    CkHttp::ckDispose(http)
    CkHttpRequest::ckDispose(req)
    CkFileAccess::ckDispose(fac)


    ProcedureReturn
EndProcedure