This FORK repo seems to be working >

[pavletabata]

to save some time of others, as the current repo is abandoned, these repos (updated branches) seem to be up-to-date:

• https://github.com/Trunkstar/oauth2-microsoft but if you want to allow other audiance, you should override & replace /organizations with /common or /consumers for your in below example:

$provider = new Trunkstar\OAuth2\Client\Provider\Microsoft([
	...
	'urlAuthorize'=>'https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize',
	'urlAccessToken'=>'https://login.microsoftonline.com/organizations/oauth2/v2.0/token',
]);

• https://github.com/lkallioniemi/oauth2-microsoft
• https://github.com/nospi/oauth2-microsoft

or

i have added those 2 modified files from: https://github.com/oddhill/oauth2-microsoft/tree/support-org-mail/src/Provider

and example use:

               $provider = new Stevenmaguire\OAuth2\Client\Provider\Microsoft([
			'clientId'                  => 'xxx',
			'clientSecret'            => 'xxx',
			'redirectUri'             => 'xxx',
		]);

		if (isset($_GET['error'])) {
			var_dump($_REQUEST);
			exit;
		}
		if (!isset($_GET['code'])) {

			// If we don't have an authorization code then get one
			$options = [
				'state' => 'OPTIONAL_CUSTOM_CONFIGURED_STATE',
				'scope' => ['User.Read'] // array or string
			];

			$authUrl = $provider->getAuthorizationUrl($options);
			// $this->setcookie ('ms_oauth2state',  $provider->getState() );
			header('Location: ' . $authUrl);
			exit;
	      }
	      ....

[Ustynovskyi]

Hi. Thanks, man.
I am struggling to make outlook oauth thing working for microsoft the same way it does with google, but I can't really wrap my head around all this tokens.

Can you hint me, on how to get the correct codes and where to put it?
I got client id and client secret from azure.
Now I need to convert it into refresh tokens for each of my users with outlook email that will give offline access to phpmailer.

I tired going with msal js lib for ms graph and got ms authorization popup window. But instead of authorization code msalClient.loginPopup returns idToken and accessToken. I tired adding 'offline_access' to request scopes, grant_type: 'authorization_code' and response_mode:'form_post', but it changes basically nothing.

(Stevenmaguire\OAuth2\Client\Provider\Microsoft)->getAccessToken() function gives "Bad request" exception.
Maybe I am doing something very wrong.
Thanks again.