Laravel package for Microsoft Graph API
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.
src added missing $ to filter Nov 11, 2018
.gitignore added gitignore Oct 31, 2018
composer.json cleaned up paths and added instructions Oct 31, 2018 cleaned up paths and added instructions Oct 31, 2018

Microsoft Graph API

A Laravel package for working with Microsoft Graph API.


To use Microsoft Grapth API an application needs creating at

Create a new application, name the application. Click continue the Application Id will then be displayed.

Next click Generate New Password under Application Secrets it won't be shown again so ensure you've copied it and added to .env more details further down.


Now click Add Platform under Platforms and select web.

Enter you desired redirect url. This is the url you're application will use to connect to Graph API.

Now under Microsoft Grpaph Permissions click add and select which permissions to use, a maximum of 20 can be selected.

The other options are optional, click save at the bottom of the page to save your changes.

Via Composer

$ composer require daveismynamelaravel/msgraph

In Laravel 5.5 the service provider will automatically get registered. In older versions of the framework just add the service provider in config/app.php file:

'providers' => [
    // ...

You can publish the migration with:

php artisan vendor:publish --provider="DaveismynameLaravel\MsGraph\MsGraphServiceProvider" --tag="migrations"

After the migration has been published you can create the tokens tables by running the migration:

php artisan migrate

You can publish the config file with:

php artisan vendor:publish --provider="DaveismynameLaravel\MsGraph\MsGraphServiceProvider" --tag="config"

When published, the config/msgraph.php config file contains:


return [

    * the clientId is set from the Microsoft portal to identify the application
    'clientId' => env('MSGRAPH_CLIENT_ID'),

    * set the application secret

    'clientSecret' => env('MSGRAPH_SECRET_ID'),

    * Set the url to trigger the oauth process this url should call return MsGraph::connect();
    'redirectUri' => env('MSGRAPH_OAUTH_URL'),

    * set the url to be redirected to once the token has been saved

    'msgraphLandingUri'  => env('MSGRAPH_LANDING_URL'),

    set the authorize url

    'urlAuthorize' => '',

    set the token url
    'urlAccessToken' => '',

    set the scopes to be used, Microsoft Graph API will accept up to 20 scopes

    'scopes' => 'offline_access openid calendars.readwrite contacts.readwrite files.readwrite mail.readwrite mail.send tasks.readwrite mailboxsettings.readwrite user.readwrite',

    The default timezone is set to Europe/London this option allows you to set your prefered timetime
    'preferTimezone' => env('MSGRAPH_PREFER_TIMEZONE', 'outlook.timezone="Europe/London"'),

Ensure you've set the following urls in your .env file:


Optionally add



Note this package expects a user to be logged in.

A routes example:

Route::group(['middleware' => ['web', 'auth']], function(){
    Route::get('msgraph', function(){

        if (!is_string(MsGraph::getAccessToken())) {
            return redirect(env('MSGRAPH_OAUTH_URL'));
        } else {
            //display your details
            return MsGraph::get('me');

    Route::get('msgraph/oauth', function(){
        return MsGraph::connect();

Or using a middleware route, if user does not have a graph token then automatically redirect to get authenticated

Route::group(['middleware' => ['web', 'MsGraphAuthenticated']], function(){
    Route::get('msgraph', function(){
        return MsGraph::get('me');

Route::get('msgraph/oauth', function(){
    return MsGraph::connect();

Once authenticated you can call MsGraph:: with the following verbs:

MsGraph::get($endpoint, $array = [], $id = null)
MsGraph::post($endpoint, $array = [], $id = null)
MsGraph::put($endpoint, $array = [], $id = null)
MsGraph::patch($endpoint, $array = [], $id = null)
MsGraph::delete($endpoint, $array = [], $id = null)

The second param of array is not always required, it's requirement is determined from the endpoint being called, see the API documentation for more details.

The third param $id is optional when used the accesstoken will be attempted to be retrieved based on the id. When omited the logged in user will be used.

These expect the API endpoints to be passed, the url is provided, only endpoints after this should be used ie:


API documenation can be found at

To make things a little easier there is also trait classes provided:

Each Trait class provides confinient methods that call the end points processes the data and returns json of the results.

These can be called directly for instance to list emails, optionally these params can be provided:

$top = 25 - sets number of records $skip = 0 - sets how many records to skip $param = [] - send array of options such as orderby, top, skip, count



  • getCalendars($top = 25, $skip = 0, $params = [])
  • createCalendar($data)
  • getCalendar($calendarId)
  • updateCalendar($calendarId, $data)
  • deleteCalendar($calendarId, $data)

Calendar Events

  • getCalendarEvents($top = 25, $skip = 0, $params = [])
  • getEvent($eventId)
  • createEvent($data)
  • updateCalendarEvent($calendarId, $eventId, $data)
  • deleteCalendarEvent($calendarId, $eventId)


  • getContacts($top = 25, $skip = 0, $params = [])
  • createContact($data)
  • getContact($contactId)
  • updateContact($contactId, $data)
  • deleteContact($contactId, $data)


  • getEmails($top = 25, $skip = 0, $folderId = null)
  • getEmailAttachments($email_id)
  • getEmailInlineAttachments($email)
  • sendEmail($subject, $message, $to, $cc, $bcc, $attachments = null)
  • sendEmailReply($id, $message, $to, $cc, $bcc, $attachments = null)
  • forwardEmail($id, $message, $to, $cc, $bcc, $attachments = null)


  • getEvents($top = 25, $skip = 0, $params = [])
  • getCalendarEvent($calendarId, $eventId)
  • createCalendarEvent($data)
  • updateEvent($eventId, $data)
  • deleteEvent($calendarId, $eventId)


  • getDrives()
  • downloadFile($fileId)
  • deleteFile($fileId)


  • getTasks($top = 25, $skip = 0, $params = [])
  • getTaskFolders()
  • createTask($data)
  • getTask($taskId)
  • updateTask($taskId, $data)
  • deleteTask($taskId, $data)

More trais will be added over the coming months.

To restrict access to routes only to authenticated users there is a middleware route called 'MsGraphAuthenticated'

Add MsGraphAuthenticated to routes to ensure the user is authenticated:

Route::group(['middleware' => ['web', 'MsGraphAuthenticated'], function()

Access token model, to access the model reference this ORM model

use DaveismynameLaravel\MsGraph\Models\MsGraphToken;

Change log

Please see the changelog for more information on what has changed recently.


Contributions are welcome and will be fully credited.

Contributions are accepted via Pull Requests on Github.

Pull Requests

  • Document any change in behaviour - Make sure the and any other relevant documentation are kept up-to-date.

  • Consider our release cycle - We try to follow SemVer v2.0.0. Randomly breaking public APIs is not an option.

  • One pull request per feature - If you want to do more than one thing, send multiple pull requests.


If you discover any security related issues, please email email instead of using the issue tracker.


license. Please see the license file for more information.