(SQL Server) OAuth2 for a GMail using a Service Account Key

Demonstrates how to use GMail with OAuth2 for a Google Service Account. The 1st step is to obtain a temporary access token from the Google OAuth 2.0 Authorization Server. This can be accomplished using Chilkat HTTP.

Once the access token is obtained, it may be used to send email. The access token may be used while it remains valid to send as many emails as desired. Once it expires, a new access token needs to be obtained (using the same procedure).

Note: This is for OAuth2 using Google Service account keys.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    DECLARE @iTmp0 int
    -- Important: Do not use nvarchar(max).  See the warning about using nvarchar(max).
    DECLARE @sTmp0 nvarchar(4000)
    -- This example requires the Chilkat API to have been previously unlocked.
    -- See Global Unlock Sample for sample code.

    -- --------------------------------------------------------------------
    -- Important:  In most cases, this example is not what you are looking for.
    -- This example is for OAuth2 using a Google Service Account Key.
    -- 
    -- It is more likely that the example you actually need is here:
    -- Get GMail SMTP Access Token 
    -- --------------------------------------------------------------------

    DECLARE @http int
    -- Use "Chilkat_9_5_0.Http" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Http', @http OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    -- When a service account (Client ID) is created at https://code.google.com/apis/console/
    -- Google will generate a P12 key.  This is a PKCS12 (PFX) file that you will download
    -- and save.  The password to access the contents of this file is "notasecret".
    -- NOTE: The Chilkat Pfx API provides the ability to load a PFX/P12 and re-save
    -- with a different password.

    -- Begin by loading the downloaded .p12 into a Chilkat certificate object:
    DECLARE @cert int
    -- Use "Chilkat_9_5_0.Cert" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Cert', @cert OUT

    DECLARE @success int
    EXEC sp_OAMethod @cert, 'LoadPfxFile', @success OUT, '/myDir/API Project-1c43a291e2a1-notasecret.p12', 'notasecret'
    IF @success <> 1
      BEGIN
        EXEC sp_OAGetProperty @cert, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @http
        EXEC @hr = sp_OADestroy @cert
        RETURN
      END

    -- The next (and final) step is to request the access token.  Chilkat internally
    -- does all the work of forming the JWT header and JWT claim set, encoding and
    -- signing the JWT, and sending the access token request.
    -- The application need only provide the inputs: The iss, scope(s), sub, and the
    -- desired duration with a max of 3600 seconds (1 hour).
    -- 
    -- Each of these inputs is defined as follows 
    -- (see https://developers.google.com/accounts/docs/OAuth2ServiceAccount
    -- iss: The email address of the service account.
    -- scope: A space-delimited list of the permissions that the application requests.
    -- sub: The email address of the user for which the application is requesting delegated access.
    --       the "sub" may be empty if no delegation exists.
    -- numSec: The number of seconds for which the access token will be valid (max 3600).

    DECLARE @iss nvarchar(4000)
    SELECT @iss = '761326798069-r5mljlln1rd4lrbhg75efgigp36m78j5@developer.gserviceaccount.com'
    DECLARE @scope nvarchar(4000)
    SELECT @scope = 'https://mail.google.com/'
    -- The sub should be your Google Apps user email address (not a gmail.com address)
    DECLARE @oauth_sub nvarchar(4000)
    SELECT @oauth_sub = 'YOUR_GOOGLE_APPS_USER_EMAIL_ADDRESS'
    DECLARE @numSec int
    SELECT @numSec = 3600

    DECLARE @accessToken nvarchar(4000)
    EXEC sp_OAMethod @http, 'G_SvcOauthAccessToken', @accessToken OUT, @iss, @scope, @oauth_sub, @numSec, @cert
    EXEC sp_OAGetProperty @http, 'LastMethodSuccess', @iTmp0 OUT
    IF @iTmp0 <> 1
      BEGIN
        EXEC sp_OAGetProperty @http, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @http
        EXEC @hr = sp_OADestroy @cert
        RETURN
      END
    ELSE
      BEGIN

        PRINT 'access token: ' + @accessToken
      END

    -- Now that we have the access token, it may be used to send as many emails as desired
    -- while it remains valid.  Once the access token expires, a new access token should be
    -- retrieved and used.

    -- -----------------------------------------------------------------------
    DECLARE @mailman int
    -- Use "Chilkat_9_5_0.MailMan" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.MailMan', @mailman OUT

    -- Set the properties for the GMail SMTP server:
    EXEC sp_OASetProperty @mailman, 'SmtpHost', 'smtp.gmail.com'
    EXEC sp_OASetProperty @mailman, 'SmtpPort', 587
    EXEC sp_OASetProperty @mailman, 'StartTLS', 1

    EXEC sp_OASetProperty @mailman, 'SmtpUsername', 'YOUR_GOOGLE_APPS_USER_EMAIL_ADDRESS'
    EXEC sp_OASetProperty @mailman, 'OAuth2AccessToken', @accessToken

    -- Create a new email object
    DECLARE @email int
    -- Use "Chilkat_9_5_0.Email" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Email', @email OUT

    EXEC sp_OASetProperty @email, 'Subject', 'This is a test'
    EXEC sp_OASetProperty @email, 'Body', 'This is a test'
    EXEC sp_OASetProperty @email, 'From', 'YOUR NAME <YOUR_GOOGLE_APPS_USER_EMAIL_ADDRESS>'
    EXEC sp_OAMethod @email, 'AddTo', @success OUT, 'Chilkat Admin', 'admin@chilkatsoft.com'
    -- To add more recipients, call AddTo, AddCC, or AddBcc once per recipient.

    -- Call SendEmail to connect to the SMTP server and send.
    -- The connection (i.e. session) to the SMTP server remains
    -- open so that subsequent SendEmail calls may use the
    -- same connection.  
    EXEC sp_OAMethod @mailman, 'SendEmail', @success OUT, @email
    IF @success <> 1
      BEGIN
        EXEC sp_OAGetProperty @mailman, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @http
        EXEC @hr = sp_OADestroy @cert
        EXEC @hr = sp_OADestroy @mailman
        EXEC @hr = sp_OADestroy @email
        RETURN
      END

    -- You may close the connection here.  If the connection is kept open, 
    -- the next call to mailman.SendEmail will continue using the already-established connection
    -- (and automatically re-connect if needed).
    EXEC sp_OAMethod @mailman, 'CloseSmtpConnection', @success OUT
    IF @success <> 1
      BEGIN

        PRINT 'Connection to SMTP server not closed cleanly.'
      END


    PRINT 'Email Sent via GMail using an OAuth2 Service Account Key.'

    EXEC @hr = sp_OADestroy @http
    EXEC @hr = sp_OADestroy @cert
    EXEC @hr = sp_OADestroy @mailman
    EXEC @hr = sp_OADestroy @email


END
GO