services	platforms	author
active-directory, Microsoft Graph API	java	austin

Integrate the Microsoft Graph API into a Java command line app using username and password

This sample shows a command line app that calls the Azure AD-secured Microsoft Graph API. The Java application uses the ScribeJava Authentication Library to obtain a base 64 encoded JSON Web Token (JWT) through the OAuth 2.0 protocol. The returned JWT is known as an access token. The access token is added to all requests on the Microsoft Graph API as an HTTP header. It authenticates the user and gets access to the service. This sample shows you how to use ScribeJava to authenticate users via simple credentials (username and password) using a text-only interface.

Quick Start

Getting started with the sample is easy. It is configured to run out of the box with minimal setup.

Step 1: Register an Azure AD Tenant

To use this sample you need a Azure Active Directory Tenant. If you're not sure what a tenant is or how you would get one, read What is an Azure AD tenant? or Sign up for Azure as an organization. These docs should get you started on your way to using Azure AD.

Step 2: Download Java (7 and above) for your platform

To use this sample, you need a working installation of Java and Gradle.

The sample was built using the Gradle plugin for IntelliJ IDEA IDE. The project build.gradle file is configured to let you run the sample from within IntelliJ. The run build configuration lets you run or debug the sample.

Step 3: Download the Sample application and modules

Next, clone the sample repo and install the project's dependencies.

From your shell or command line:

• $ git@github.com:microsoftgraph/console-java-connect-sample.git
• $ cd console-java-connect-sample

Step 4: Register the Console Java Connect app

1. Sign in to the Application Registration portal.
2. Click on the blue Add an app button on the right side of the page.
3. Give your application a name.
4. Un-check Let us help you get started under the Guided Setup section
5. Copy the Application Id of the new app registration to the clipboard
6. Click the Add Platform button under the Platforms section and an Add Platform window opens.
7. Choose Native Application in the Add Platform window.

Note: The Azure Active Directory v2.0 authorization endpoint uses incremental and dynamic consent which means that you don't need to set permissions (now called scopes) when you register your application. Scopes are requested by the your app at run-time.

Step 5: Configure your app using Constants.java

Using your favorite code editor, open ..\console-java-connect-sample\src\main\java\com\microsoft\graphsample\connect\Constants.java Paste the Application Id from the clipboard into Constants.java, line 11 to replace ENTER_YOUR_CLIENT_ID.

public class Constants {

    public final static String CLIENT_ID = "ENTER_YOUR_CLIENT_ID";

//...
}

Step 6: Install Gradle

If you do not have the Gradle build system installed, install Gradle

Step 7: Add the Gradle wrapper to the project

From your shell or command line at the project root:

• $ gradle wrapper

Step 8: Build and run the sample.

From your shell or command line at the project root:

• $ gradle run

This will run the sample.

Running the sample

The command line interface opens a browser window on the Azure Active Directory authorization endpoint. Enter your user name and password to authenticate. When you are authenticated, you're taken to an authorization window for the sample app. Review and accept the scopes requested by the sample app. Click the Ok button on the authorization window. The browser navigates to http://localhost. Copy the full redirect URL address and paste it into a text editor. It should look like the following url:

http://localhost/?code={IAQABAAIAAABHh4kmS_aKT5XrjzxRAtHz5S...p7OoAFPmGPqIq-1_bMCAA}&session_state=dd64ce71-4424-494b-8818-be9a99ca0798

Note: URL example is truncated for clarity. { and } were added to the example to delimit the access token for illustration purposes.

The access token starts after ?code= and ends before &session_state.

Copy the access token to the system clipboard and paste it into the console under And paste the authorization code here.

You are prompted with Hello, {your name}. Would you like to send an email to yourself or someone else? Enter the address to which you'd like to send a message. If you enter nothing, the message will go to your address

After you enter an email address or leave the prompt blank, an email is sent to you or the address you type into the console.

You can send email to other addresses by repsonding with a "y" to the prompt Want to send another message? Type 'y' for yes and any other key to exit.

Acknowledgements

We would like to acknowledge the folks who own/contribute to the following projects for their support of Azure Active Directory and their libraries that were used to build this sample. In places where we forked these libraries to add additional functionality, we ensured that the chain of forking remains intact so you can navigate back to the original package. Working with such great partners in the open source community clearly illustrates what open collaboration can accomplish. Thank you!