Topic: How to Access Microsoft Graph via Visual Lisp?

[CodeDing]

Hey all,

So, I know I can make a simple GET/POST request via Visual Lisp, something like this:

Code - Auto/Visual Lisp: [Select]

1. (defun web-get (url / http_object response)
2.   (setq http_object (vlax-create-object "WinHTTP.WinHTTPRequest.5.1"))
3.   (vlax-invoke-method http_object 'open "GET" url :vlax-false)
4.   (vlax-invoke-method http_object 'send)
5.   (setq response (vlax-get-property http_object "ResponseText"))
6.   (if http_object (vlax-release-object http_object))
7.   response
8. )
9.  
10. Command: (web-get "https://jsonplaceholder.typicode.com/todos/1")
11. "{\n  \"userId\": 1,\n  \"id\": 1,\n  \"title\": \"delectus aut autem\",\n  \"completed\": false\n}"
12.  

And I can use Microsoft's Graph API to make simple requests about my profile:
https://developer.microsoft.com/en-us/graph/graph-explorer
So, when I run the test "https://graph.microsoft.com/v1.0/me", I can get my profile info.

But the only way that request is fulfilled is because when using the Graph Explorer, the "Access Token" for myself is automatically sent.

I DO KNOW that I can copy that Access Token, then hard-code it into my (web-get ...) function so that I can get my profile...

What I would like to know is HOW can I make a request to GET my Access Token, to subsequently make a second request to get my profile info?

Workflow would look something like this:
- Command initiated to get Profile Info
- Program makes request for Access Token of current logged-in user
- Access Token returned
- Program makes request for profile of same user
- Profile info returned

I should probably note that it would be on a Dell Machine, Windows OS, & I am a user within a company, so I am logged-in as a company user with a default Microsoft Office account 'tied' to my logged in account (idk how it all ties together exactly).

Can retrieving the Access Token via a GET/POST request be accomplished in Visual Lisp?

Best
~DD

[It's Alive!]

you might have a look through the python SDK for hints
https://github.com/microsoftgraph/msgraph-sdk-python

[It's Alive!]

What is this, spyware for companies? 

[BIGAL]

Do you just want "Username" ? That is a big Hint. getenv.

[CodeDing]

What is this, spyware for companies? 

I guess I hadn't thought of it like that 
But the Python docs were pretty helpful for seeing some of the setup involved!

Do you just want "Username" ? That is a big Hint. getenv.

I'm trying to retrieve department / manager of the user to help determine which programs should load for them! I could hard-code it, but then it needs updated anytime someone new comes, if people leave, etc. Would be nice to keep it dynamic.


..... So if I'm understanding this process a little better, It seems that I am desiring delegated credentials for the user, but perhaps I still need somekind of Client key? So I would have to register an app for the company on Azure or something? I'm not totally familiar with all this web business like web apps and what not. But I'd like to get my feet wet with it where I can

[BIGAL]

I had plot routines that did as I suggested already, looked at user name and would send output to correct printer near them, we had a multi story building. Again (getenv "Username")

Yes if people leave have to change the list of names.

Note username is returned for current logged in user on a pc.

[MickD]

It seems to be able to access the api you need to register your 'app' then you can have at it.
https://learn.microsoft.com/en-us/graph/auth-register-app-v2

Do you need to use MS Graph? If not you could build your own simple web server on the company intranet or host it in the cloud. Something like Go with SQLite db would be easy enough to setup, you could even register it and then use it with the MS Graph api to get extra data if needed.

[It's Alive!]

I guess I hadn't thought of it like that 

Well, I watched a couple of videos and one of them mentioned, and I’m paraphrasing,
companies can access employee emails via the REST API to scan for keyword words as a search tool.

Of course, the conspiracist in me immediately thought, scan employee emails and feed them to an AI to build profiles 
 

[It's Alive!]

Do you need to use MS Graph?

With MS Graph you would have everything. From device info, who they have lunch schedules with, and Sally’s next fingernail appointment

[MickD]

Do you need to use MS Graph?

With MS Graph you would have everything. From device info, who they have lunch schedules with, and Sally’s next fingernail appointment

No doubt! 

[CodeDing]

Do you need to use MS Graph? If not you could build your own simple web server on the company intranet or host it in the cloud. Something like Go with SQLite db would be easy enough to setup, you could even register it and then use it with the MS Graph api to get extra data if needed.

^^^ I believe this would be the same concept as hard-coding it into our acad.lsp file. It would still need updated by me, but I'd rather have it come from Graph since IT has to update these profiles already anyways 

Of course, the conspiracist in me immediately thought, scan employee emails and feed them to an AI to build profiles 

That would be bonkers. Plus, that's what Copilot M365 is for yeah? 

[MickD]

I believe this would be the same concept as hard-coding it into our acad.lsp file

I'm not sure what you mean by this, your lisp just queries your api to get the data for the user (like your json return sample) and do what you need. If you mean you are using/instructing Graph itself to install MS app's (not lisp/arx app's in cad) then I understand.

As I mentioned, you can also use the web app as a go between to Graph (IT can still handle profiles), then you only need to register one application with Graph, only users on company machines will have access to the web app via your lisp so security risks are minimal.
Your problem at the moment is you would need to use some authentication to gain access and you don't want or need each user to have direct access, your lisp with web app is the gate keeper.

I hope that makes sense