Microsoft Graph API in Laravel Controller

Question

I am using organization Outlook account. My aim is to get List of Calendar Events in the Laravel controller. Steps I followed:

Created simple application in https://aad.portal.azure.com/. I got Application (client) ID, Directory ID, clientSecrets, Object ID/Tenant ID which usable for login and to get further data from Microsoft.
Created controller in the Laravel web.php

    Route::get('/graph', 'microsoftapi@getCalendarData');

Added Microsoft Graph SDK for laravel. https://github.com/microsoftgraph/msgraph-sdk-php

  composer require microsoft/microsoft-graph

My Laravel Controller code is:

<?php

namespace App\Http\Controllers;

use App\User;
use Illuminate\Http\Request;
use Jumbojett\OpenIDConnectClient;
use GuzzleHttp\Client;
use Microsoft\Graph\Graph;
use Microsoft\Graph\Model;

class microsoftapi extends Controller
{
    public $accesstoken;

    public function __construct()
    {
        $guzzle = new Client();
        $tenantId = 'common';
        $url = 'https://login.microsoftonline.com/' . $tenantId . '/oauth2/token?api-version=1.0';
        $token = json_decode($guzzle->post($url, [
            'form_params' => [
                'client_id' => '*******************',///$clientId,
                'client_secret' => '*****************', // $clientSecret,
                'resource' => 'https://graph.microsoft.com/',
                'grant_type' => 'client_credentials',
            ],
        ])->getBody()->getContents());
        $this->accessToken = $token->access_token;

    }

    public function getCalendarData(){
        $graph = new Graph();
        $graph->setBaseUrl("https://graph.microsoft.com/")
               ->setApiVersion("v1.0")
               ->setAccessToken($this->accessToken); 
dd($graph);
        $user = $graph->createRequest("GET","/users/abc@***********.com/calendar/events")
                    ->addHeaders(array("Content-Type" => "application/json"))
                    ->setReturnType(\Microsoft\Graph\Model\User::class)
                    ->setTimeout("1000")
                    ->execute();   

        echo "Hello, I am $user->getGivenName() ";
    }

By dd($graph); current output I am getting as:

Microsoft\Graph\Graph {#221 ▼
  -_accessToken: "eyJ0eXAiOiJKV1QiLCJub25jZSI6IjNueHRoZzZrMllaTVZsRTMzUmNHOVhMbG9TekJRcUhVTzRVY2xLanpGV1EiLCJhbGciOiJSUzI1NiIsIng1dCI6IllNRUxIVDBndmIwbXhvU0RvWWZvbWpxZmpZVSIsImtp ▶"
  -_apiVersion: "v1.0"
  -_baseUrl: "https://graph.microsoft.com/"
  -_proxyPort: null
}

So I am getting Access token properly. But but, If I commented dd as // dd($graph); then the getCalendarData not working. My output is:

GuzzleHttp\Exception\ClientException
Client error: `GET https://graph.microsoft.com/v1.0/users/abc@********.com/calendar/events` resulted in a `401 Unauthorized` response: {"error":{"code":"NoPermissionsInAccessToken","message":"The token contains no permissions, or permissions can not be un (truncated...)

Anyone Know what is the problem ?

Kindly let me know details.. Please don't send Microsoft links which I am feeling difficult to understand!!!!!

Please reply me details..

Permission Screen Shot:

score 3 · Accepted Answer · answered Mar 30 '20 at 13:37

In your screenshot, it says that admin consent has not been given for the permissions you've set on the app registration (the "Not granted for..." status in the permission list). Because you're using client credentials, the application permissions (not the delegated permissions) are applied. Since admin consent has not been granted, your token has no actual permissions in it.

You need a tenant admin to go to your app registration and grant admin consent.

thanks even i think the same. hope its the right solution – ABHILASHA K.M Mar 31 '20 at 03:48 — ABHILASHA K.M, Mar 31 '20 at 03:48

score 1 · Answer 2 · answered Mar 27 '20 at 06:31

1

I feel it is about the Admin Permissions which needs to provided the app to access the API data Please refer this link - https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent

answered Mar 27 '20 at 06:31

Deepak Kotian

89
9

score 0 · Answer 3 · answered Mar 27 '20 at 06:25

0

You have to give permissions Calendars.Read and Calendars.ReadWrite in both your application in azure dashboard and your api call code.

Reference link: https://learn.microsoft.com/en-us/graph/permissions-reference and https://learn.microsoft.com/en-us/graph/api/calendar-list-events?view=graph-rest-1.0&tabs=http

answered Mar 27 '20 at 06:25

Alok p

614
5
18

You have to grant the permissions. please flow steps given in this [answer](https://stackoverflow.com/questions/55515219/microsoft-graph-api-create-events-for-users-that-are-not-me/55628757#55628757) – Alok p Mar 27 '20 at 06:49
check my Image attached – ABHILASHA K.M Mar 27 '20 at 06:52
R you checked with the Image ? attached along with the question.. – ABHILASHA K.M Mar 27 '20 at 06:59
Open (https://jwt.io/) and check if the access token has correct permission. If not logout and login again and grant permission . – Alok p Mar 27 '20 at 07:00
Are you checked my image and codes ? any mistake ? I decoded my token, but permission tag not appears there... – ABHILASHA K.M Mar 27 '20 at 07:09
https://learn.microsoft.com/en-us/azure/active-directory/develop/id-tokens On this link also permission tag not present – ABHILASHA K.M Mar 27 '20 at 07:17

Microsoft Graph API in Laravel Controller

3 Answers3

Linked