Xbase++

Hotmail Refresh Access Token (also for Live.com, Outlook.com)

See more OAuth2 Examples

An OAuth2 access token is typically valid for 1 hour. Interaction with the Hotmail account owner via a browser is only needed for getting the initial access token. Once you have it, it can be continually refreshed without user interaction for a long time.

See: How Long can an OAuth2 Access Token be Refreshed?

Xbase++

LOCAL nSuccess
LOCAL oJsonToken
LOCAL oOauth2
LOCAL oSbJson

nSuccess := 0

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

//  It is assumed we previously obtained an OAuth2 access token.

//  Note: Refreshing an access token does not require user-interaction.  
//  Only the act of getting the initial access token requires interactive authorization from the Hotmail account owner 
//  (i.e. a browser is displayed and the Hotmail account owner authorizes access by the app).

//  Once you have the initial access token, it can be refreshed for a long time.
//  A typical strategy is to write your application to automatically refresh the access token 
//  when authentication fails, and then retry the operation with the new access token.

oJsonToken := CreateObject("Chilkat.JsonObject")
nSuccess := oJsonToken:LoadFile("qa_data/tokens/hotmail.json")
IF (nSuccess != 1)
    ? "Failed to load office365.json"
    oJsonToken:destroy()
    RETURN
ENDIF

//  The access token JSON looks like this:

//  {
//    "token_type": "Bearer",
//    "scope": "https://outlook.office.com/SMTP.Send https://outlook.office.com/IMAP.AccessAsUser.All https://outlook.office.com/POP.AccessAsUser.All",
//    "expires_in": 3600,
//    "ext_expires_in": 3600,
//    "access_token": "EwBoA+ ... 7pOYcWr5pFwQgI=",
//    "refresh_token": "M.C546_BL2.0.U.-CkW ... g5CKSlDBQ$$",
//    "id_token": "eyJ0e ... 2iiu5iqBK9n7s3A"
//  }

oOauth2 := CreateObject("Chilkat.OAuth2")

//  See Microsoft OAuth2 Authorization Endpoint
oOauth2:TokenEndpoint := "https://login.microsoftonline.com/common/oauth2/v2.0/token"

//  Replace this with your actual App Registration's Application (client) ID.
oOauth2:ClientId := "CLIENT_ID"

//  Get the "refresh_token"
oOauth2:RefreshToken := oJsonToken:StringOf("refresh_token")

//  Send the HTTP POST to refresh the access token..
nSuccess := oOauth2:RefreshAccessToken()
IF (nSuccess != 1)
    ? oOauth2:LastErrorText
    oJsonToken:destroy()
    oOauth2:destroy()
    RETURN
ENDIF

? oOauth2:LastErrorText

? "New access token: " + oOauth2:AccessToken
? "New refresh token: " + oOauth2:RefreshToken

//  Update the JSON with the new tokens.
oJsonToken:UpdateString("access_token", oOauth2:AccessToken)
oJsonToken:UpdateString("refresh_token", oOauth2:RefreshToken)

//  Save the new JSON access token response to a file.
oSbJson := CreateObject("Chilkat.StringBuilder")
oJsonToken:EmitCompact := 0
oJsonToken:EmitSb(oSbJson)
oSbJson:WriteFile("qa_data/tokens/hotmail.json", "utf-8", 0)

? "OAuth2 authorization granted!"
? "New Access Token = " + oOauth2:AccessToken

oJsonToken:destroy()
oOauth2:destroy()
oSbJson:destroy()