cyberark / secretless-broker

Secure your apps by making them Secretless
Apache License 2.0
232 stars 42 forks source link

There is an example generic HTTP connector config for Graph Api - Microsoft Teams #1503

Open s-abdo opened 1 year ago

s-abdo commented 1 year ago

Use case

I am a developer building an app that send notifications to people through MS Teams.

Additional details

In order to get the necessary credentials to send the notification, I need to make some requests to MS Teams. One of them is to get a token. To make this request I need to send a request like this:

POST /{tenant}/oauth2/v2.0/token HTTP/1.1
Host: https://login.microsoftonline.com
Content-Type: application/x-www-form-urlencoded

client_id=11111111-1111-1111-1111-111111111111
&scope=user.read%20mail.read
&grant_type=password
&client_secret=HF8Q~Krjqh4r...    // NOTE: Only required for web apps

The point is that some of those parameters must be sent in the body request, such as scope, grant_type, client_secret, client_id

So, it will be really useful to build a connector able to send body parameters in the request.