How to make source code from CQDPowerShell cmdlet acquiring access token non-interactively

Question

We are trying to implement similar to code taken from&nbsp;CQDPowerShell and re-written in C# in our .Net application. But we do not find a way how to make non-interactive access/refresh token acquisition instead of interactive access token acquisition with popup window with entering credentials . We find only how to get access token in the PowerShell cmdlet&nbsp;CQDPowerShell and the access token lives only 1 hour. Then the access token have to acquired interactively again.&nbsp; While we need to have the code running indefinitely without the user interaction.&nbsp;string&nbsp;redirectUrl&nbsp;=&nbsp;System.Web.HttpUtility.UrlEncode("https://cqd.teams.microsoft.com/spd/");
string&nbsp;resourceUrl&nbsp;=&nbsp;System.Web.HttpUtility.UrlEncode("https://cqd.teams.microsoft.com");
string&nbsp;clientId&nbsp;=&nbsp;"c61d67cf-295a-462c-972f-33af37008751";
 
string&nbsp;url&nbsp;=&nbsp;$"https://login.microsoftonline.com/common/oauth2/authorize?response_type=token&amp;redirect_uri={redirectUrl}&amp;client_id={clientId}"&nbsp;+
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$"&amp;prompt=login&amp;nonce=$nonce&amp;resource={resourceUrl}";
 
Form&nbsp;form&nbsp;=&nbsp;new&nbsp;Form&nbsp;{&nbsp;Width&nbsp;=&nbsp;440,&nbsp;Height&nbsp;=&nbsp;640&nbsp;};
WebBrowser&nbsp;web&nbsp;=&nbsp;new&nbsp;WebBrowser&nbsp;{&nbsp;Width&nbsp;=&nbsp;420,&nbsp;Height&nbsp;=&nbsp;600,&nbsp;Url&nbsp;=&nbsp;new&nbsp;Uri(url)&nbsp;};
 
web.DocumentCompleted&nbsp;+=&nbsp;(sender,&nbsp;e)&nbsp;=&gt;
{
      string&nbsp;uri&nbsp;=&nbsp;web.Url.AbsoluteUri;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if&nbsp;(Regex.Match(uri,&nbsp;"error=[^&amp;]*|access_token=[^&amp;]*|code=[^&amp;]*").Success)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;form.Close();
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}
};
 
web.ScriptErrorsSuppressed&nbsp;=&nbsp;true;
form.Controls.Add(web);
form.Shown&nbsp;+=&nbsp;(sender,&nbsp;e)&nbsp;=&gt;
{
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;form.Activate();
};
 
form.ShowDialog();
 
string&nbsp;responseUrl&nbsp;=&nbsp;web.Url.ToString();
 
int&nbsp;codeStartIndex&nbsp;=&nbsp;responseUrl.IndexOf("access_token=")&nbsp;+&nbsp;"access_token=".Length;
int&nbsp;codeEndIndex&nbsp;=&nbsp;responseUrl.IndexOf("&amp;");
string&nbsp;code&nbsp;=&nbsp;responseUrl.Substring(codeStartIndex,&nbsp;codeEndIndex&nbsp;-&nbsp;codeStartIndex);The code above retrieves access code, as well as possible to retrieve "access code", by replacing "response_type=token" into "response_type=code". But do not know how to use that "access code".&nbsp;We need this API to retrieve Teams Call Quality Dashboard statistics. Maybe there are other APIs to retrieve Teams Call Quality statistics?

teams1535 · Answer

Oleksii_Kolinko&nbsp;
Please find the code here in gitrepo.&nbsp;
here we used loop the access code to generate each time for the requirement.
Token1, Token2, Token3 will generate in each request.
&nbsp;
Please find the code for getting Refresh token. Use this function to call each time to retrieve or get the access token.
Please check above solutions and let us know if you need any thing.

oleksii_kolinko · Answer

teams1535&nbsp;&nbsp;First example works with client secret, which in this case is not availible.&nbsp;While according to seconds example I written the code, which should theoretically return access token out of "authorization code":using&nbsp;(HttpClient&nbsp;httpClient&nbsp;=&nbsp;new&nbsp;HttpClient())
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;string&nbsp;newRequestPath&nbsp;=&nbsp;$"https://login.microsoftonline.com/&lt;tenant guid&gt;/oauth2/v2.0/token";
 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;string&nbsp;requestBOdy&nbsp;=&nbsp;$"grant_type=authorization_code&amp;client_id={clientId}&amp;redirect_uri={redirectUrl}&amp;code={code}";
 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;HttpContent&nbsp;httpContent&nbsp;=&nbsp;new&nbsp;StringContent(requestBOdy,&nbsp;Encoding.UTF8,&nbsp;"application/x-www-form-urlencoded");
 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;HttpRequestMessage&nbsp;request&nbsp;=&nbsp;new&nbsp;HttpRequestMessage(HttpMethod.Post,&nbsp;newRequestPath);
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;request.Content&nbsp;=&nbsp;httpContent;
 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Task&lt;HttpResponseMessage&gt;&nbsp;response&nbsp;=&nbsp;httpClient.SendAsync(request);
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;response.Wait();
 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Task&lt;string&gt;&nbsp;responseString&nbsp;=&nbsp;response.Result.Content.ReadAsStringAsync();
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;responseString.Wait();

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}&nbsp;But it returns the following error message:&nbsp;"{\"error\":\"invalid_client\",\"error_description\":\"AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'.\r\nTrace ID: d89e74e1-36dd-4807-9c51-dda7003c0700\r\nCorrelation ID: eb4c20b0-7ab5-41c4-a7b3-3d793e6de0b6\r\nTimestamp: 2020-04-24 12:07:16Z\",\"error_codes\":[7000218],\"timestamp\":\"2020-04-24 12:07:16Z\",\"trace_id\":\"d89e74e1-36dd-4807-9c51-dda7003c0700\",\"correlation_id\":\"eb4c20b0-7ab5-41c4-a7b3-3d793e6de0b6\",\"error_uri\":\"https://login.microsoftonline.com/error?code=7000218\"}"

oleksii_kolinko · Answer

I have contacted the owner of the PowerShell cmdlet, he told me that there is no non-interactive way of getting the access token.

eduardonz · Answer

hi there 🙂Oleksii_Kolinko&nbsp;just wondering if you have found a way to do non-interactive login on the&nbsp;CQDPowerShell module.&nbsp;thanks,Ed

oleksii_kolinko · Answer

I did not found the way. It does not exist. I got a response from a developer of the module.

Forum Discussion

How to make source code from CQDPowerShell cmdlet acquiring access token non-interactively

Share

Resources