(Node.js) SharePoint OAuth2 Client Credentials Authentication

See more SharePoint Online Examples

Note: This example uses the new "Integrated OAuth2 Client Credentials" feature introduced in Chilkat v9.5.0.96.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOS

var os = require('os');
if (os.platform() == 'win32') {  
  var chilkat = require('@chilkat/ck-node23-win64'); 
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node23-linux-arm');
    } else if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node23-linux-arm64');
    } else {
        var chilkat = require('@chilkat/ck-node23-linux-x64');
    }
} else if (os.platform() == 'darwin') {
  var chilkat = require('@chilkat/ck-node23-mac-universal');
}

function chilkatExample() {

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    var success;
    var http = new chilkat.Http();

    // Provide the information needed for Chilkat to automatically fetch the OAuth2.0 
    // access token as needed.
    // This is the new "Integrated OAuth2 Client Credentials" feature introduced in Chilkat v9.5.0.96.  
    var jsonOAuthCC = new chilkat.JsonObject();

    // --------------------------------------------------------------------------------------------------------
    // You'll need to have registered an app in Azure beforehand.
    // See How to Create an Azure App Registration for OAuth 2.0 Client Credentials
    // --------------------------------------------------------------------------------------------------------

    // Use the values from your App Registration in Azure.
    jsonOAuthCC.UpdateString("client_id","e1cd2318-xxxx-4916-bfd6-xxxxxxxxxxxx");
    jsonOAuthCC.UpdateString("client_secret","K.d8Q~RoJxxxxvCj_u_xxxxxxxxxxxxxxxxxxxxx");

    // You'll always use this scope for client credentials, because the allowed actions
    // are determined by the App Permissions defined when you registered the app in Azure.
    jsonOAuthCC.UpdateString("scope","https://graph.microsoft.com/.default");

    // The token endpoint includes your tenant ID.  Use your tenant ID (not the tenant ID shown here).
    jsonOAuthCC.UpdateString("token_endpoint","https://login.microsoftonline.com/112d7ed6-71bf-4eba-a866-738364321bfc/oauth2/v2.0/token");

    // Provide the OAuth2 information. Chilkat will use this information to automatically fetch the OAuth2 access token as needed,
    http.AuthToken = jsonOAuthCC.Emit();

    // Get information about all SharePoint sites.
    var sbJson = new chilkat.StringBuilder();
    success = http.QuickGetSb("https://graph.microsoft.com/v1.0/sites/getAllSites",sbJson);
    if (success == false) {
        console.log(http.LastErrorText);
        return;
    }

    var statusCode = http.LastStatus;

    console.log("Response status code = " + statusCode);

    if (statusCode !== 200) {
        console.log(sbJson.GetAsString());
        console.log("Failed.");
        return;
    }

    var jsonResp = new chilkat.JsonObject();
    jsonResp.LoadSb(sbJson);
    jsonResp.EmitCompact = false;

    console.log(jsonResp.Emit());
    console.log("Success.");

    // Use this online tool to generate parsing code from sample JSON: 
    // Generate Parsing Code from JSON

}

chilkatExample();