MSGraphMail

1.0.0

Public/Connect-MSGraphMail.ps1

function Connect-MSGraphMail {
    [CmdletBinding()]
    Param(
        # Azure AD application id.
        [Parameter(Mandatory = $True, ParameterSetName = 'Connect')]
        [string]$ApplicationID,
        # Azure AD application secret.
        [Parameter(Mandatory = $True, ParameterSetName = 'Connect')]
        [string]$ApplicationSecret,
        # Graph permission scope.
        [Parameter(ParameterSetName = 'Connect')]
        [uri]$Scope = [uri]'https://graph.microsoft.com/.default',
        # Tenant ID.
        [Parameter(ParameterSetName = 'Connect')]
        [string]$TenantID,
        # Reconnect mode
        [Parameter(Mandatory = $True, ParameterSetName = 'Reconnect')]
        [switch]$Reconnect
    )
    if ((-not $Script:MSGMAuthenticationInformation.Token) -or ([DateTime]::Now -ge $Script:MSGMAuthenticationInformation.Expires)) {
        if (([DateTime]::Now -ge $Script:MSGMAuthenticationInformation.Expiry)) {
            try {
                if ((-not $Script:MSGMConnectionInformation) -and (-not $Reconnect)) {
                    $ConnectionInformation = @{
                        ClientID = $ApplicationID
                        ClientSecret = $ApplicationSecret
                        Scope = $Scope
                        URI = "https://login.microsoftonline.com/$($TenantID)/oauth2/v2.0/token"
                        TenantID = $TenantID
                    }
                    New-Variable -Name 'MSGMConnectionInformation' -Value $ConnectionInformation -Scope 'Script'
                }
                $AuthenticationBody = @{
                    client_id = $Script:MSGMConnectionInformation.ClientID
                    client_secret = $Script:MSGMConnectionInformation.ClientSecret
                    scope = $Script:MSGMConnectionInformation.Scope
                    grant_type = 'client_credentials'
                }
                $AuthenticationParameters = @{
                    URI = $Script:MSGMConnectionInformation.URI
                    Method = 'POST'
                    ContentType = 'application/x-www-form-urlencoded'
                    Body = $AuthenticationBody
                }
                $TokenResponse = Invoke-WebRequest @AuthenticationParameters
                $TokenPayload = ($TokenResponse.Content | ConvertFrom-Json)
                $AuthenticationInformation = @{
                    Token = $TokenPayload.access_token
                    Expires = Get-TokenExpiry -ExpiresIn $TokenPayload.expires_in
                    Type = $TokenPayload.token_type
                }
                if (-Not $Script:MSGMAuthenticationInformation) {
                    New-Variable -Name 'MSGMAuthenticationInformation' -Value $AuthenticationInformation -Scope 'Script'
                } else {
                    Set-Variable -Name 'MSGMAuthenticationInformation' -Value $AuthenticationInformation -Scope 'Script'
                }
                Write-CustomMessage -Message 'Connected to the Microsoft Graph API' -Type 'Success'
            } catch {
                $ErrorRecord = @{
                    ExceptionType = 'System.Net.Http.HttpRequestException'
                    ErrorMessage = "Graph API request $($_.TargetObject.Method) $($_.TargetObject.RequestUri) failed."
                    InnerException = $_.Exception
                    ErrorID = 'GraphAuthenticationFailed'
                    ErrorCategory = 'ProtocolError'
                    TargetObject = $_.TargetObject
                    ErrorDetails = $_.ErrorDetails
                    BubbleUpDetails = $True
                }
                $RequestError = New-MSGraphErrorRecord @ErrorRecord
                $PSCmdlet.ThrowTerminatingError($RequestError)
            }
        }
    } else {
        Write-CustomMessage -Message "Already connected to Microsoft Graph API." -Type 'Information'
    } 
}