Sample code for 30+ languages & platforms
Swift

SharePoint Rest API using OAuth

See more OAuth2 Examples

Demonstrates how to get an OAuth2 access token for the SharePoint REST API.

Chilkat Swift Downloads

Swift

func chilkatTest() {
    var success: Bool = false

    // To further clarify, see OAuth 2.0 Authorization Flow

    let oauth2 = CkoOAuth2()!

    // The ListenPort should match the port in your localhost Reply URL of your Azure AD app.
    // Your Reply URL must be exactly "http://localhost:LISTEN_PORT/"
    //    * Do not use "https"
    //    * Make sure the ending "/" is included.
    //    * You may choose any port number that doesn't collide with anything else.
    oauth2.listenPort = 3017

    oauth2.authorizationEndpoint = "https://login.microsoftonline.com/TENANT_ID/oauth2/authorize"
    oauth2.tokenEndpoint = "https://login.windows.net/TENANT_ID/oauth2/token?api-version=1.0"

    // Replace these with actual values.
    // Use the application ID
    oauth2.clientId = "CLIENT_ID"
    // Use the password
    oauth2.clientSecret = "CLIENT_SECRET"

    oauth2.codeChallenge = false

    oauth2.scope = "openid"
    oauth2.resource = "https://graph.microsoft.com/"

    oauth2.includeNonce = true
    oauth2.responseMode = "form_post"
    oauth2.responseType = "id_token+code"

    // Begin the OAuth2 Authorization code flow.  This returns a URL that should be loaded in a browser.
    var url: String? = oauth2.startAuth()
    if oauth2.lastMethodSuccess == false {
        print("\(oauth2.lastErrorText!)")
        return
    }

    print("url = \(url!)")

    // Launch the default browser on the system and navigate to the url.
    // The LaunchBrowser method was added in Chilkat v10.1.2.
    success = oauth2.launchBrowser(url: url)
    if success == false {
        print("\(oauth2.lastErrorText!)")
        return
    }

    // Wait for the user to approve or deny authorization in the browser.
    var numMsWaited: Int = 0
    while (numMsWaited < 90000) && (oauth2.authFlowState.intValue < 3) {
        oauth2.sleepMs(millisec: 100)
        numMsWaited = numMsWaited + 100
    }

    // If the browser does not respond within the specified time, AuthFlowState will be:
    // 
    // 1: Waiting for Redirect – The OAuth2 background thread is waiting for the browser's redirect request.
    // 2: Waiting for Final Response – The thread is awaiting the final access token response.
    // In either case, cancel the background task initiated by StartAuth.

    if oauth2.authFlowState.intValue < 3 {
        oauth2.cancel()
        print("No response from the browser!")
        return
    }

    // Check AuthFlowState to determine if authorization was granted, denied, or failed:
    // 
    // 3: Success – OAuth2 flow completed, the background thread exited, and the successful response is in AccessTokenResponse.
    // 4: Access Denied – OAuth2 flow completed, the background thread exited, and the error response is in AccessTokenResponse.
    // 5: Failure – OAuth2 flow failed before completion, the background thread exited, and error details are in FailureInfo.

    if oauth2.authFlowState.intValue == 5 {
        print("OAuth2 failed to complete.")
        print("\(oauth2.failureInfo!)")
        return
    }

    if oauth2.authFlowState.intValue == 4 {
        print("OAuth2 authorization was denied.")
        print("\(oauth2.accessTokenResponse!)")
        return
    }

    if oauth2.authFlowState.intValue != 3 {
        print("Unexpected AuthFlowState:\(oauth2.authFlowState.intValue)")
        return
    }

    print("OAuth2 authorization granted!")
    print("Access Token = \(oauth2.accessToken!)")

}