Public/Connect/Connect-PoshGraph.ps1
|
function Connect-PoshGraph { [CmdletBinding()] param ( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string] $Tenant, [Parameter()] [string] $App, [Parameter()] [switch] $ApplicationOnly, [Parameter()] [switch] $DeleteCreds ) if ($App) { $Tenant = '{0}-{1}' -f $Tenant, $App } $TenantPath = Join-Path -Path $Env:USERPROFILE -ChildPath ('.Posh365/Credentials/Graph/{0}' -f $Tenant) $TenantCred = Join-Path -Path $TenantPath -ChildPath ('{0}Cred.xml' -f $Tenant) $TenantConfig = Join-Path -Path $TenantPath -ChildPath ('{0}Config.xml' -f $Tenant) if ($DeleteCreds) { Remove-Item -Path $TenantConfig, $TenantCred -Force -ErrorAction SilentlyContinue continue } $XML = Import-Clixml $TenantConfig [System.Management.Automation.PSCredential]$Configuration = $XML.Cred $MarshalSecret = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($Configuration.Password) $Secret = [System.Runtime.InteropServices.Marshal]::PtrToStringAuto($MarshalSecret) $Request = if ($ApplicationOnly) { @{ Method = "Post" Body = @{ Grant_Type = 'client_credentials' Client_Id = $XML.ClientId Client_Secret = $Secret scope = 'https://graph.microsoft.com/.default' resource = 'https://graph.microsoft.com/' #this neeeds to be removed } Uri = 'https://login.microsoftonline.com/{0}/oauth2/token' -f $Configuration.Username } } else { [System.Management.Automation.PSCredential]$Credential = Import-Clixml -Path $TenantCred $MarshalPassword = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($Credential.Password) $Password = [System.Runtime.InteropServices.Marshal]::PtrToStringAuto($MarshalPassword) @{ Method = 'POST' Body = @{ Grant_Type = 'PASSWORD' Client_Id = $XML.ClientId Client_Secret = $Secret Scope = "offline_access https://graph.microsoft.com/.default" Username = $Credential.UserName Password = $Password } Uri = 'https://login.microsoftonline.com/{0}/oauth2/v2.0/token' -f $Configuration.Username } } $TenantResponse = Invoke-RestMethod @Request $Script:TimeToRefresh = ([datetime]::UtcNow).AddSeconds($TenantResponse.expires_in - 10) $Script:Token = $TenantResponse.access_token $Script:RefreshToken = $TenantResponse.refresh_token } |