(DataFlex) Office365 OAuth2 Resource Owner Password Credentials Grant for SMTP, IMAP, POP

Demonstrates how to get an OAuth2 access token for use with Office 365 in the SMTP, IMAP, and POP3 protocols using the resource owner password credentials grant.

This is a way of getting an OAuth2 access token for the O365 account you own, WITHOUT needing to grant access interactively via a browser.

Note: This example requires Chilkat v11.0.0 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Use ChilkatAx-win32.pkg

Procedure Test
    Boolean iSuccess
    Handle hoHttp
    Variant vReq
    Handle hoReq
    Variant vResp
    Handle hoResp
    Integer iStatusCode
    Handle hoFac
    String sTemp1

    Move False To iSuccess

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Get an OAuth2 access token by sending a POST like this:

    // 	POST {tenant}/oauth2/v2.0/token
    // 	Host: login.microsoftonline.com
    // 	Content-Type: application/x-www-form-urlencoded
    // 
    // 	client_id=6731de76-14a6-49ae-97bc-6eba6914391e
    // 	&client_secret=*****************
    // 	&scope=user.read%20openid%20profile%20offline_access
    // 	&username=MyUsername@myTenant.com
    // 	&password=SuperS3cret
    // 	&grant_type=password

    Get Create (RefClass(cComChilkatHttp)) To hoHttp
    If (Not(IsComObjectCreated(hoHttp))) Begin
        Send CreateComObject of hoHttp
    End

    Get Create (RefClass(cComChilkatHttpRequest)) To hoReq
    If (Not(IsComObjectCreated(hoReq))) Begin
        Send CreateComObject of hoReq
    End
    Set ComHttpVerb Of hoReq To "POST"
    Set ComContentType Of hoReq To "application/x-www-form-urlencoded"

    // Use the application ID for the client_id.
    // (In Azure App Registrations, use the Application (client) ID)
    Send ComAddParam To hoReq "client_id" "CLIENT_ID"
    Send ComAddParam To hoReq "client_secret" "CLIENT_SECRET"

    Send ComAddParam To hoReq "scope" "openid profile offline_access https://outlook.office365.com/SMTP.Send https://outlook.office365.com/POP.AccessAsUser.All https://outlook.office365.com/IMAP.AccessAsUser.All"
    Send ComAddParam To hoReq "username" "my_email_address"
    Send ComAddParam To hoReq "password" "my_email_password"
    Send ComAddParam To hoReq "grant_type" "password"

    // Replace "{tenant}" with your tenant ID, such as "112d7ed6-71bf-4eba-a866-738364321bfc".req.HttpVerb = "POST";
    Get Create (RefClass(cComChilkatHttpResponse)) To hoResp
    If (Not(IsComObjectCreated(hoResp))) Begin
        Send CreateComObject of hoResp
    End
    Get pvComObject of hoReq to vReq
    Get pvComObject of hoResp to vResp
    Get ComHttpReq Of hoHttp "https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token" vReq vResp To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoHttp To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get ComStatusCode Of hoResp To iStatusCode
    Showln "response status code: " iStatusCode
    Showln "response body:"
    Get ComBodyStr Of hoResp To sTemp1
    Showln sTemp1

    // The successful JSON response looks like this:

    // 
    // {
    //   "token_type": "Bearer",
    //   "scope": "https://outlook.office365.com/IMAP.AccessAsUser.All https://outlook.office365.com/POP.AccessAsUser.All https://outlook.office365.com/SMTP.Send",
    //   "expires_in": 3599,
    //   "ext_expires_in": 3599,
    //   "access_token": "eyJ0eX ... 62Nyw",
    //   "refresh_token": "0.AAAA1n4t ... tNxyA",
    //   "id_token": "eyJ0eXA ... qdIGyOYw"
    // }

    // Save the JSON to a file for future requests.
    If (iStatusCode = 200) Begin
        Get Create (RefClass(cComCkFileAccess)) To hoFac
        If (Not(IsComObjectCreated(hoFac))) Begin
            Send CreateComObject of hoFac
        End
        Get ComBodyStr Of hoResp To sTemp1
        Get ComWriteEntireTextFile Of hoFac "qa_data/tokens/office365.json" sTemp1 "utf-8" False To iSuccess
    End



End_Procedure