Tcl

SharePoint OAuth2 Client Credentials Authentication

Demonstrates how to authenticate with OAuth 2.0 using the client credentials grant type. This is for SharePoint Online which is the cloud-based service provided by Microsoft as part of Office 365. (Users access SharePoint Online through a web browser, and the service is hosted on Microsoft's servers.) Tcl

load ./chilkat.dll

set success 0

# This requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set http [new_CkHttp]

# Provide the information needed for Chilkat to automatically fetch the OAuth2.0 
# access token as needed.
set jsonOAuthCC [new_CkJsonObject]

# --------------------------------------------------------------------------------------------------------
# You'll need to have registered an app in Azure beforehand.
# See How to Create SharePoint App Registration for OAuth 2.0 Client Credentials
# --------------------------------------------------------------------------------------------------------

# Use the values from your App Registration in Azure.
CkJsonObject_UpdateString $jsonOAuthCC "client_id" "CLIENT_ID"
CkJsonObject_UpdateString $jsonOAuthCC "client_secret" "SECRET_VALUE"

# You'll always use this scope for client credentials, because the allowed actions
# are determined by the App Permissions defined when you registered the app in Azure.
CkJsonObject_UpdateString $jsonOAuthCC "scope" "https://graph.microsoft.com/.default"

# The token endpoint includes your tenant ID. 
CkJsonObject_UpdateString $jsonOAuthCC "token_endpoint" "https://login.microsoftonline.com/TENANT_ID/oauth2/v2.0/token"

# Provide the OAuth2 information. Chilkat will use this information to automatically fetch the OAuth2 access token as needed,
CkHttp_put_AuthToken $http [CkJsonObject_emit $jsonOAuthCC]

# Get information about all SharePoint sites.
set sbJson [new_CkStringBuilder]

set success [CkHttp_QuickGetSb $http "https://graph.microsoft.com/v1.0/sites/getAllSites" $sbJson]
if {$success == 0} then {
    puts [CkHttp_lastErrorText $http]
    delete_CkHttp $http
    delete_CkJsonObject $jsonOAuthCC
    delete_CkStringBuilder $sbJson
    exit
}

set statusCode [CkHttp_get_LastStatus $http]

puts "Response status code = $statusCode"

if {$statusCode != 200} then {
    puts [CkStringBuilder_getAsString $sbJson]
    puts "Failed."
    delete_CkHttp $http
    delete_CkJsonObject $jsonOAuthCC
    delete_CkStringBuilder $sbJson
    exit
}

set jsonResp [new_CkJsonObject]

CkJsonObject_LoadSb $jsonResp $sbJson
CkJsonObject_put_EmitCompact $jsonResp 0

puts [CkJsonObject_emit $jsonResp]
puts "Success."

# Use this online tool to generate parsing code from sample JSON: 
# Generate Parsing Code from JSON

delete_CkHttp $http
delete_CkJsonObject $jsonOAuthCC
delete_CkStringBuilder $sbJson
delete_CkJsonObject $jsonResp