(Unicode C) IMAP Auto-Refresh Office365 Access Token

See more Office365 Examples

Demonstrates how to automatically recover from an expired access token when OAuth2 authentication fails in the IMAP protocol. If the server responds with "NO AUTHENTICATE failed.", then we refresh the access token and retry.

Chilkat C/C++ Library Downloads
MS Visual C/C++ Linux/CentOS C/C++ Alpine Linux C/C++ MAC OS X C/C++	armhf/aarch64 C/C++ C++ Builder iOS C/C++ Android C/C++	Solaris C/C++ MinGW C/C++

#include <C_CkJsonObjectW.h>
#include <C_CkImapW.h>
#include <C_CkOAuth2W.h>
#include <C_CkStringBuilderW.h>

void ChilkatSample(void)
    {
    HCkJsonObjectW jsonToken;
    BOOL success;
    HCkImapW imap;
    const wchar_t *loginLastErrorText;
    HCkOAuth2W oauth2;
    HCkStringBuilderW sbJson;

    // An Office365 OAuth2 access token must first be obtained prior
    // to running this code.

    // Getting the OAuth2 access token for the 1st time requires the O365 account owner's 
    // interactive authorizaition via a web browser.  Afterwards, the access token
    // can be repeatedly refreshed automatically.

    // See the following examples for getting and refreshing an OAuth2 access token

    // Get Office365 SMTP/IMAP/POP3 OAuth2 Access Token
    // Refresh Office365 SMTP/IMAP/POP3 OAuth2 Access Token

    // First get our previously obtained OAuth2 access token.
    jsonToken = CkJsonObjectW_Create();
    success = CkJsonObjectW_LoadFile(jsonToken,L"qa_data/tokens/office365.json");
    if (success == FALSE) {
        wprintf(L"Failed to open the office365 OAuth JSON file.\n");
        CkJsonObjectW_Dispose(jsonToken);
        return;
    }

    imap = CkImapW_Create();

    CkImapW_putSsl(imap,TRUE);
    CkImapW_putPort(imap,993);

    // Connect to the Office365 IMAP server.
    success = CkImapW_Connect(imap,L"outlook.office365.com");
    if (success != TRUE) {
        wprintf(L"%s\n",CkImapW_lastErrorText(imap));
        CkJsonObjectW_Dispose(jsonToken);
        CkImapW_Dispose(imap);
        return;
    }

    // Use OAuth2 authentication.
    CkImapW_putAuthMethod(imap,L"XOAUTH2");

    // Login using our username (i.e. email address) and the access token for the password.
    success = CkImapW_Login(imap,L"OFFICE365_EMAIL_ADDRESS",CkJsonObjectW_stringOf(jsonToken,L"access_token"));
    if (success != TRUE) {
        loginLastErrorText = CkImapW_lastErrorText(imap);

        // If we're still connected to the mail server, then it means the server sent a non-success response,
        // Such as:  NO AUTHENTICATE failed.
        if (CkImapW_IsConnected(imap) == TRUE) {

            // Refresh the OAuth2 access token, and if successful, save the new (refreshed) access token and try authenticating again.
            oauth2 = CkOAuth2W_Create();

            // Use your actual Directory (tenant) ID instead of "112d7ed6-71bf-4eba-a866-738364321bfc"
            CkOAuth2W_putTokenEndpoint(oauth2,L"https://login.microsoftonline.com/112d7ed6-71bf-4eba-a866-738364321bfc/oauth2/v2.0/token");

            // Replace these with your Azure App Registration's actual values.
            CkOAuth2W_putClientId(oauth2,L"CLIENT_ID");
            CkOAuth2W_putClientSecret(oauth2,L"CLIENT_SECRET");

            // Get the "refresh_token"
            CkOAuth2W_putRefreshToken(oauth2,CkJsonObjectW_stringOf(jsonToken,L"refresh_token"));

            // Send the HTTP POST to refresh the access token..
            success = CkOAuth2W_RefreshAccessToken(oauth2);
            if (success != TRUE) {
                wprintf(L"%s\n",CkOAuth2W_lastErrorText(oauth2));
                CkJsonObjectW_Dispose(jsonToken);
                CkImapW_Dispose(imap);
                CkOAuth2W_Dispose(oauth2);
                return;
            }

            wprintf(L"New access token: %s\n",CkOAuth2W_accessToken(oauth2));
            wprintf(L"New refresh token: %s\n",CkOAuth2W_refreshToken(oauth2));

            // Update the JSON with the new tokens.
            CkJsonObjectW_UpdateString(jsonToken,L"access_token",CkOAuth2W_accessToken(oauth2));
            CkJsonObjectW_UpdateString(jsonToken,L"refresh_token",CkOAuth2W_refreshToken(oauth2));

            // Save the new JSON access token response to a file.
            sbJson = CkStringBuilderW_Create();
            CkJsonObjectW_putEmitCompact(jsonToken,FALSE);
            CkJsonObjectW_EmitSb(jsonToken,sbJson);
            CkStringBuilderW_WriteFile(sbJson,L"qa_data/tokens/office365.json",L"utf-8",FALSE);

            wprintf(L"New Access Token = %s\n",CkOAuth2W_accessToken(oauth2));

            // Retry the login.
            success = CkImapW_Login(imap,L"OFFICE365_EMAIL_ADDRESS",CkJsonObjectW_stringOf(jsonToken,L"access_token"));
            if (success == FALSE) {
                wprintf(L"%s\n",CkImapW_lastErrorText(imap));
                CkJsonObjectW_Dispose(jsonToken);
                CkImapW_Dispose(imap);
                CkOAuth2W_Dispose(oauth2);
                CkStringBuilderW_Dispose(sbJson);
                return;
            }

        }
        else {
            // Show the last error text for the call to Login
            wprintf(L"%s\n",loginLastErrorText);
            CkJsonObjectW_Dispose(jsonToken);
            CkImapW_Dispose(imap);
            CkOAuth2W_Dispose(oauth2);
            CkStringBuilderW_Dispose(sbJson);
            return;
        }

    }
    else {
        wprintf(L"O365 OAuth authentication is successful.\n");
    }

    // Do something...
    success = CkImapW_SelectMailbox(imap,L"Inbox");
    if (success != TRUE) {
        wprintf(L"%s\n",CkImapW_lastErrorText(imap));
        CkJsonObjectW_Dispose(jsonToken);
        CkImapW_Dispose(imap);
        CkOAuth2W_Dispose(oauth2);
        CkStringBuilderW_Dispose(sbJson);
        return;
    }

    // Your application can continue to do other things in the IMAP session....

    // When finished, logout and close the connection.
    success = CkImapW_Logout(imap);
    success = CkImapW_Disconnect(imap);

    wprintf(L"Finished.\n");


    CkJsonObjectW_Dispose(jsonToken);
    CkImapW_Dispose(imap);
    CkOAuth2W_Dispose(oauth2);
    CkStringBuilderW_Dispose(sbJson);

    }