Xbase++

Azure REST API Access Token

See more Azure OAuth2 Examples

Demonstrates how to request an Azure REST API OAUTH2 access token.

Note: In order to access resources a Service Principal needs to be created in your Tenant. It is really convenient to do it via AZ CLI:

az ad sp create-for-rbac --name [APP_NAME] --password [CLIENT_SECRET]

Xbase++

LOCAL nSuccess
LOCAL oRest
LOCAL nBTls
LOCAL nPort
LOCAL nBAutoReconnect
LOCAL cStrResponseBody
LOCAL nRespStatusCode
LOCAL oJson

nSuccess := 0

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

oRest := CreateObject("Chilkat.Rest")

//  URL: https://login.microsoftonline.com/TENANT_ID/oauth2/token
nBTls := 1
nPort := 443
nBAutoReconnect := 1
nSuccess := oRest:Connect("login.microsoftonline.com", nPort, nBTls, nBAutoReconnect)
IF (nSuccess != 1)
    ? "ConnectFailReason: " + Str(oRest:ConnectFailReason)
    ? oRest:LastErrorText
    oRest:destroy()
    RETURN
ENDIF

//  Add query params to the request.
oRest:AddQueryParam("grant_type", "client_credentials")
oRest:AddQueryParam("client_id", "APP_ID")
oRest:AddQueryParam("client_secret", "CLIENT_SECRET")
//  Note: The resource must match the API for which you're using the access token..
oRest:AddQueryParam("resource", "https://management.azure.com/")

cStrResponseBody := oRest:FullRequestFormUrlEncoded("POST", "/TENANT_ID/oauth2/token")
IF (oRest:LastMethodSuccess != 1)
    ? oRest:LastErrorText
    oRest:destroy()
    RETURN
ENDIF

nRespStatusCode := oRest:ResponseStatusCode
IF (nRespStatusCode >= 400)
    ? "Response Status Code = " + Str(nRespStatusCode)
    ? "Response Header:"
    ? oRest:ResponseHeader
    ? "Response Body:"
    ? cStrResponseBody
    oRest:destroy()
    RETURN
ENDIF

oJson := CreateObject("Chilkat.JsonObject")
oJson:Load(cStrResponseBody)
oJson:EmitCompact := 0
? oJson:Emit()

//  The result is an access token such as the following:

//  {
//    "token_type": "Bearer",
//    "expires_in": "3600",
//    "ext_expires_in": "3600",
//    "expires_on": "1557864616",
//    "not_before": "1557860716",
//    "resource": "https://management.azure.com/",
//    "access_token": "eyJ0eXAiOiJKV1QiL ... 20UFDDOHEyUg"
//  }

//  We'll save this JSON to a file for other examples to use..
oJson:WriteFile("qa_data/tokens/azureToken.json")

oRest:destroy()
oJson:destroy()