How to authenticate with Microsoft Graph API and retrieve OneDrive drive ID with PHP

不明 0

I am creating a PHP script to back up my server configuration to OneDrive using Microsoft Graph API. I have created an app on Azure portal and selected "Accounts in any organizational directory (any Microsoft Entra ID tenant - multi-tenant)" and "personal Microsoft accounts (e.g. Skype, Xbox)" for authentication purposes. I want to retrieve the corresponding OneDrive for a user, but I'm getting an error that says:

The identity of the calling application could not be established.

I am using the following code:

$this->getGraphServiceClient()->users()->byUserId('user-id')->get()->wait();

What is the proper way to authenticate with Microsoft Graph API and retrieve the OneDrive drive ID for a specific user?

1 answer

CarlZhao-MSFT 44,671

Hi @不明

To retrieve a specific user's OneDrive, you need to grant the calling app the Files.ReadWrite.All application permission and request an access token using the daemon-based client credentials flow.

<?php
use Microsoft\Graph\GraphServiceClient;
use Microsoft\Kiota\Abstractions\ApiException;
use Microsoft\Kiota\Authentication\Oauth\ClientCredentialContext;

// Create an auth provider object. We're using the ClientCredentialContext library in this example. 
$tokenRequestContext = new ClientCredentialContext(
    'TENANT_ID',
    'CLIENT_ID',
    'CLIENT_SECRET'
);

// Initialize the service client
$graphServiceClient = new GraphServiceClient($tokenRequestContext);

$result = $graphServiceClient->users()->byUserId('user-id')->drives()->get()->wait();

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.

不明 0 Reputation points

2023-12-05T07:23:02.4433333+00:00

Should a personal account be added to the app? If yes, please tell me how to do it.
不明 0 Reputation points

2023-12-05T07:25:35.8666667+00:00

I've added the appropriate permissions and I've set my TENANT_ID to common, but I still get the error.
CarlZhao-MSFT 44,671 Reputation points

2023-12-05T07:35:17.2833333+00:00

Is your user a personal account?
不明 0 Reputation points

2023-12-05T16:04:50.67+00:00

Yes, and my account has a onedrive family subscription
CarlZhao-MSFT 44,671 Reputation points

2023-12-06T02:25:18.67+00:00

Please share your full script. If your user is a personal account, then your context must be a delegated context.

不明 0

Parent class:

<?php

declare(strict_types=1);

namespace App\Commons\MicrosoftGraph;

use Microsoft\Graph\GraphServiceClient;
use Microsoft\Kiota\Authentication\Oauth\AuthorizationCodeContext;
use Microsoft\Kiota\Authentication\Oauth\OnBehalfOfContext;
use Microsoft\Kiota\Authentication\Oauth\ClientCredentialContext;
use Microsoft\Graph\Core\Authentication\GraphPhpLeagueAccessTokenProvider;

class MicrosoftGraph
{
    private GraphServiceClient $graphServiceClient;

    private AuthorizationCodeContext|OnBehalfOfContext|ClientCredentialContext $context;

    private array $defaultScopes = [];

    public function __construct(
        AuthorizationCodeContext|OnBehalfOfContext|ClientCredentialContext $context,
        array $scopes = []
    ) {
        $this->graphServiceClient = new GraphServiceClient(
            $context,
            $context instanceof ClientCredentialContext ? [] : [...$this->defaultScopes, ...$scopes]
        );

        $this->context = $context;
    }

    public function getGraphServiceClient(): GraphServiceClient
    {
        return $this->graphServiceClient;
    }

    public function getToken(): string
    {
        $tokenProvider = new GraphPhpLeagueAccessTokenProvider($this->context);
        $token = $tokenProvider->getAuthorizationTokenAsync('https://graph.microsoft.com')->wait();

        if ($token === null) {
            throw new \RuntimeException('Unable to retrieve token');
        }

        return $token;
    }
}

Sub class:

<?php

declare(strict_types=1);

namespace App\Commons\MicrosoftGraph;

use Microsoft\Kiota\Authentication\Oauth\ClientCredentialContext;
use League\Flysystem\FilesystemAdapter;
use League\Flysystem\Config;
use League\Flysystem\FileAttributes;
use Microsoft\Kiota\Abstractions\ApiException;

class OneDriveFilesystem extends MicrosoftGraph implements FilesystemAdapter
{
    private ClientCredentialContext $tokenContext;

    public function __construct(string $tenantId, string $clientId, string $clientSecret)
    {
        $this->tokenContext = new ClientCredentialContext(
            $tenantId, // common
            $clientId, // my client id
            $clientSecret, // my client secret
        );

        parent::__construct($this->tokenContext);
    }

    public function fileExists(string $path): bool
    {
        try {
            $data = $this->getGraphServiceClient()->users()->byUserId('user-id')->get()->wait();
            dd('data', $data);
        } catch (ApiException $th) {
            dd('error', $th->getError()->getMessage(), $this->getToken());
        }

        return true;
    }

	// more...
}

Laravel ServiceProvider:

<?php

namespace App\Providers;

use Illuminate\Support\ServiceProvider;
use Illuminate\Support\Facades\Storage;
use App\Commons\MicrosoftGraph\OneDriveFilesystem;
use Illuminate\Filesystem\FilesystemAdapter;
use League\Flysystem\Filesystem;

class OneDriveServiceProvider extends ServiceProvider
{
    /**
     * Register services.
     */
    public function register(): void
    {
        //
    }

    /**
     * Bootstrap services.
     */
    public function boot(): void
    {
        Storage::extend('onedrive', function ($app, $config) {
            $adapter = new OneDriveFilesystem(
                $config['tenant_id'],
                $config['client_id'],
                $config['client_secret'],
            );

            return new FilesystemAdapter(
                new Filesystem($adapter, $config),
                $adapter,
                $config
            );
        });
    }
}

Use:

dd(Storage::disk('onedrive')->fileExists('test'));

Get:

The identity of the calling application could not be established.

Share via

How to authenticate with Microsoft Graph API and retrieve OneDrive drive ID with PHP

1 answer

Your answer