Microsoft
Microsoft Graph
Microsoft
This article describes the tasks required to get an access token from the Azure AD v2.0 endpoint and call Microsoft Graph. It walks you through building the Connect Sample for PHP (REST) and explains the main concepts that you implement to use Microsoft Graph. The article also describes how to access Microsoft Graph by using REST calls.
To use Microsoft Graph in your PHP app, you need to show the Microsoft sign in page to your users. The following screenshot shows a sign in page for Microsoft accounts.
Don't feel like building an app? Get up and running fast by downloading the Connect Sample for PHP (REST) that this article is based on. Or try out the Connect Sample for PHP (SDK) version that uses the Microsoft Graph Library for PHP (Preview).
To get started, you'll need:
Register an app on the Microsoft App Registration Portal. This generates the app ID and password that you'll use to configure the app.
Sign into the Microsoft App Registration Portal using either your personal or work or school account.
Choose Add an app.
Enter a name for the app, and choose Create application.
The registration page displays, listing the properties of your app.
Choose Generate New Password.
Copy the application ID and password.
Choose Add Platform and Web.
In the Redirect URI field, type http://localhost:8000/oauth.
Choose Save.
Start a new project using composer. To create a new PHP project using the Laravel framework, use the following command:
composer create-project --prefer-dist laravel/laravel getstarted
This creates a getstarted folder that you can use for this project.
Note: You can also use the Starter project that takes care of the project configuration so you can focus on the coding sections of this walkthrough.
Use an OAuth library to simplify the authentication process. The PHP League provides an OAuth client library that you can use in this project.
Open the composer.json file and include the following dependency in the require section:
"league/oauth2-client": "^1.4"
Update the dependencies by running the following command:
composer update
<div class="title" onClick="window.location='/oauth'">Sign in to Microsoft</div>
Illuminate\Http\Request class on the app > Http > routes.php file. Add the following line before any route declaration. use Illuminate\Http\Request;
Route::get('/oauth', function () {
$provider = new \League\OAuth2\Client\Provider\GenericProvider([
'clientId' => '<YOUR_APPLICATION_ID>',
'clientSecret' => '<YOUR_PASSWORD>',
'redirectUri' => 'http://localhost:8000/oauth',
'urlAuthorize' => 'https://login.microsoftonline.com/common/oauth2/v2.0/authorize',
'urlAccessToken' => 'https://login.microsoftonline.com/common/oauth2/v2.0/token',
'urlResourceOwnerDetails' => '',
'scopes' => 'openid mail.send'
]);
if (!$request->has('code')) {
return redirect($provider->getAuthorizationUrl());
}
});
At this point, you should have a PHP app that displays Sign in to Microsoft. If you click the text, the app presents the Microsoft sign-in page. The next step is to handle the code that the authorization server sends to the redirect URI and exchange it for an access token.
You need to handle the authorization server response, which contains a code that you can exchange for an access token.
Update the /oauth route so it can get an access token with the authorization code. To do this, open the app > Http > routes.php file and add the following else conditional clause to the existing if statement.
if (!$request->has('code')) {
...
// add the following lines
} else {
$accessToken = $provider->getAccessToken('authorization_code', [
'code' => $request->input('code')
]);
exit($accessToken->getToken());
}
Note that you have an access token in this line: exit($accessToken->getToken());. Now you're ready to add code to call Microsoft Graph.
You can call Microsoft Graph using REST. Replace the line exit($accessToken->getToken()); with the following code. Insert your email address in the placeholder marked with <YOUR_EMAIL_ADDRESS>.
$client = new \GuzzleHttp\Client();
$email = "{
Message: {
Subject: 'Sent using the Microsoft Graph REST API',
Body: {
ContentType: 'text',
Content: 'This is the email body'
},
ToRecipients: [
{
EmailAddress: {
Address: '<YOUR_EMAIL_ADDRESS>'
}
}
]
}}";
$response = $client->request('POST', 'https://graph.microsoft.com/v1.0/me/sendmail', [
'headers' => [
'Authorization' => 'Bearer ' . $accessToken->getToken(),
'Content-Type' => 'application/json;odata.metadata=minimal;odata.streaming=true'
],
'body' => $email
]);
if($response.getStatusCode() === 201) {
exit('Email sent, check your inbox');
} else {
exit('There was an error sending the email. Status code: ' . $response.getStatusCode());
}
You're ready to try your PHP app.
php artisan serve
http://localhost:8000 in your web browser.Check the inbox of the email address that you configured in Call the Microsoft Graph using REST section. You should have an email from the account that you used to sign in to the app.