(Tcl) OneDrive with OAuth2 Client Credentials

See more OneDrive Examples

Demonstrates how to authenticate with Microsoft OneDrive using OAuth2 client credentials. This example uses a new feature available starting in Chilkat v9.5.0.97, which is to provide the client ID, client secret, and tenant ID to Chilkat, and internally Chilkat will fetch OAuth2 access token via client credentials as necessary. Therefore, it is no longer necessary for the application to explicitly fetch the OAuth2 access token beforehand.

Note: This example requires Chilkat v9.5.0.97 or greater.

For more information, see https://learn.microsoft.com/en-us/onedrive/developer/rest-api/api/drive_list?view=odsp-graph-online

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# --------------------------------------------------------------------------------------------------------
# You'll need to have registered an app in Azure beforehand.
# See How to Create an Azure App Registration for OAuth 2.0 Client Credentials
# 
# Note: For OneDrive, your registered app needs one or more of these permissions:  Files.Read.All, Files.ReadWrite.All, Sites.Read.All, Sites.ReadWrite.All
# --------------------------------------------------------------------------------------------------------

set json [new_CkJsonObject]

# Use your App's actual client ID here:
CkJsonObject_UpdateString $json "client_id" "2871da2c-8176-4b7f-869b-2311aa82e743"

# Use your App's actual client secret here:
CkJsonObject_UpdateString $json "client_secret" "2hu9Q~r5QuryUcEkNbg1btLtnfU1VUXzhSCG6brH"

# Use this specific scope.
CkJsonObject_UpdateString $json "scope" "https://graph.microsoft.com/.default"

# Replace the tenant ID part of the URL with your tenant ID.
CkJsonObject_UpdateString $json "token_endpoint" "https://login.microsoftonline.com/114d7ed6-71bf-4dbe-a866-748364121bf2/oauth2/v2.0/token"

set http [new_CkHttp]

CkHttp_put_AuthToken $http [CkJsonObject_emit $json]

# List drives.
# You can specify a {siteId}, {groupId}, or {userId} in the URL
# to access document libraries for a group, a site, or a specific user.
# Use your specific Id instead of what we're using here:
CkHttp_SetUrlVar $http "userId" "4fe732c3-322e-4a6b-b729-2fd1eb5c6104"
set resp [CkHttp_quickGetStr $http "https://graph.microsoft.com/v1.0/users/{$userId}/drives"]
if {[CkHttp_get_LastMethodSuccess $http] != 1} then {
    puts [CkHttp_lastErrorText $http]
    delete_CkJsonObject $json
    delete_CkHttp $http
    exit
}

# The response should be JSON.
set jsonResp [new_CkJsonObject]

CkJsonObject_put_EmitCompact $jsonResp 0
CkJsonObject_Load $jsonResp $resp

# A successful response should return a status code of 200.
if {[CkHttp_get_LastStatus $http] != 200} then {
    puts [CkJsonObject_emit $jsonResp]
    puts "Response status = [CkHttp_get_LastStatus $http]"
    delete_CkJsonObject $json
    delete_CkHttp $http
    delete_CkJsonObject $jsonResp
    exit
}

puts [CkJsonObject_emit $jsonResp]

delete_CkJsonObject $json
delete_CkHttp $http
delete_CkJsonObject $jsonResp