PHP Web authenticate on Microsoft with OAuth 2.0 using GET and POST

MS AD Application Registration
portal.azure.c...
PHP Source code for GET:
docs.google.co...
PHP Source code for POST:
docs.google.co...

[@paltonlimaalves1754]

Man, you got my respect. I searched for weeks to understand how to integrate and you make it clear in 6 minutes. Thank you!

[@61783666]

Great video, simple and to the point... Good work, and keep it going 🙂

[@DieterSoost]

Respect ! Very struked and simply explained! ! Great work !

[@ondrejtomiska8738]

Clearly explained, works almost out of the box. Thank you.

[@IncognitoVideosInc]

Wow awesome video, straight to the point and works. Super helpful, thank you!!!

[@lucasfernandesazevedosanto9872]

Congratulations and thank you very much! Helped me a lot. 🤝

[@tdtdeveloper384]

omfg you made my life so much easier tyvm

[@sebastianeckley5906]

Thank You

[@ozburun9716]

Thank you !

[@globalfactsforyou]

It is working but I am not able fetch the username nor email post auth, Can you please help me?

[@johanneskingma]

A redirect (header) after an echo "..." is not allowed

[@mubarakabbas]

Thanks

[@theacher20019]

hola estoy probando, y alñogueo pero no puedo obtener el token para hacer peticiones curl alguien sabrá como lo obtengo ya aparéese el name y log out

[@lokeshdas2585]

Error: specified in the request does not match the redirect URIs configured for the application due to http_build_query() function

[@radudragos]

Make sure your redirect_uri in the code matches the one registered in Azure AD for this app..

[@MarkS-fc6bf]

I registered my web application at Microsoft Azure and tried several settings. I have done a lot of research that allows me to connect to the mailbox to be able to read the mails without going through an interaction with a user. I've found nothing. Does anyone have a step-by-step solution.

[@radudragos]

You can use Microsoft Graph API. And you can practice here: developer.microsoft.com/en-us/graph/graph-explorer

[@CarlosLeyes]

Hi Radu. I have followed the steps indicated. When doing the login, the Microsoft page never appears requesting the application permissions.

[@hakimboudraa246]

same here

[@IncognitoVideosInc]

Do you know if it is best practice to place a captcha before allowing sign-in link to be followed? Or is Microsoft handling this on their login?

[@johanneskingma]

all logon securtiy is handled by ms or a federated server. there is no need to do additional captcha's

[@tszima77]

Why do I have to set the $secret variable, if the script doesn't use it? I didn't see it in the php scripts.

[@radudragos]

You don't :)

[@MarkS-fc6bf]

Hi Radu, I'm getting this error Warning: Cannot modify header information - headers already sent by (output started at on line 41) Can u please help on me

[@radudragos]

It's just a warning. Hit refresh or change code so there is no echo output before any "header ('Location: ..."

[@FranciscoMVill]

Hi! Is it possible to log out of microsoft from the script? Thanks for the tutorial

[@radudragos]

You redirect the user to this link: login.microsoftonline.com/tenant-id/oauth2/v2.0/logout

[@FranciscoMVill]

@@radudragos Thanks dude 😁

[@LeszekMaj]

Your code is great but I don't know why you declare variable $secret but you don't use it ? Second my question is after login my token is expired only 1 hour how add refresh_token?

[@radudragos]

That $secret is a leftover, its not needed. The refresh_token is a topic for another tutorial for which I didn't have time yet :)

[@rodarape1]

hi, i have this error: CompactToken parsing failed with error code: 80049217 after this line: $rez = json_decode(curl_exec($ch), 1); please help

[@erick639]

HOla amigo! al final te funcionó el código?

[@bsungur]

Hello redu, is it possible run it in our localhost?

[@radudragos]

Yes it is possible. Microsoft accepts localhost as a redirect URI.

[@dominicgichuhi5822]

Hi, thanks for the tutorial. It works well. How can I get the email instead of the name. What parameter should I put in $_SESSION["uname"] to get the email?

[@radudragos]

Hi, it is either "mail" or "userPrincipalName". However, you can practice your query here: developer.microsoft.com/en-us/graph/graph-explorer