Cross Domain AJAX Calls and SharePoint Apps on Office 365

To give a bit of background, I have been exploring architectures and various components needed to create a multi-tenant SharePoint App. So far I have settled on using SharePoint only, as a frontend layer and using external services to drive the entire backend, including storage.
Given this high level design the first interesting item that I came across was while posting data to the backend Service from a SharePoint Hosted App. The classic client side Cross-domain security issue. Here are some of the solutions out there for this issue:

• Using the JSONP hack
  • Due to its nature, this only works for ‘GET’ requests and I wanted to do a ‘POST.
• Using the default SharePoint 2013 Web Proxy
  • I was able to make the ‘GET’ requests work with this approach but not the ‘POST’ requests.
• Creating a Custom Proxy
  • Worked but involved quite a few hoops and a remote web page, which I did not want to create.
• Enabling Cross Origin Resource Sharing (CORS) in WCF Services
  • Worked perfectly !!!

For simple requests we can enable CORS by setting some response headers like Access-Control-Allow-Origin, Access-Control-Allow-Methods and Access-Control-Allow-Headers with the value ‘*’. 
But all requests from Office 365 contain special headers and hence they are ‘Preflighted’, which means they would first send an http request with “OPTIONS” method to check the domain and then send the actual request. (More details on Preflighted requests here) For Preflighted requests we need to write some extra code along with adding the response headers. Here is a good article with sample code that explains this and below is the snap shot of the code:



And here is the snap shot of the sample app working on Office 365:


Additional Resources on CORS and Multitenant Applications with Azure:

• Enabling CORS
• Developing Multi-tenant Applications for the Cloud, 3rd Edition
• Designing Multitenant Applications on Windows Azure
• Building Big: Lessons learned from Windows Azure customers - Part I

Visual Studio 2013 is cool !!!

Over the weekend I upgraded to Windows 8.1 Enterprise and also installed Visual Studio 2013. There are quite a few editor features that I absolutely love in VS 2013. Here is a quick preview of 3 editor features that I like the most:

Peek Definition (Alt+F12)

Code Lens (References + Unit Tests summary above all Methods)

For more details on the new features or to download Visual Studio 2013, visit : http://www.microsoft.com/visualstudio/eng/visual-studio-2013

Happy Coding !!!

Avengers Emergency Helpline - Connecting Things to Internet

Avengers Emergency Helpline site. I will explain how I did this in my next post.
Enjoy playing with real things !!!….

Beginning of the Internet of Things…

Just unwrapped my Arduino Kit……

   

I have been watching this new wave of “Internet of Things” and I have decided to ride on it. This is my first experience with hardware projects. So far I have been breaking software builds but now I will break some real sh*t . Although there is ton of material out there so I am at least safe in the beginning…

For someone who wants to ride this wave like me, here are few links that helped me a lot and hope it would help you too:

• Official Arduino Site
• Arduino Tutorials by Jeremy Blum
• MIT Arduino Tutorial
• Top 40 Arduino Projects 

Enjoy playing with real things !!!….

SharePoint Apps vs. SharePoint Solutions

Last few weeks I have been working on a project which required some research on whether a developer should create an App or a traditional WSP Solution for the SharePoint 2013. The research will soon be transformed into a web app and I will post that when its ready but meanwhile here are few links which I found very helpful for this topic.

• Deciding between apps for SharePoint and SharePoint Solutions
  
• Apps for SharePoint compared with SharePoint solutions
  
• SharePoint 2013 Development (Apps versus Solutions)
  
• SharePoint Apps Playbook Series: Part 1 – SharePoint Apps vs SharePoint Solutions

New Office 365 Code Samples

Last month I worked on few Office 365 code samples which are published now on the new Office 365 developer content site on MSDN.
Here is the list :

Social Apps

• Post a Yammer message using an app for SharePoint
• Integrate Twitter with SharePoint Online
• Outlook Online: Integrate YouTube with Outlook Online

On-Premise Integration Apps

• Create a task in Exchange Online
• Create a Windows 8 app to display videos from SharePoint Online
• Search for people on Lync and start conversations 

General Management Apps

• Handle common errors in Office 365
• Manage users by calling Windows PowerShell cmdlets from C#
• Manage licenses and subscriptions for Office 365
• Manage single sign-on with Office 365

Authentication and Authorization with remote apps in Office 365 and SharePoint Online (Part 1)

This post is detailing about how you perform authentication and authorization from a remote app in SharePoint Online.
Especially, when the remote apps are running on a Non .Net technology platforms. Which means we can’t use the OOTB ‘TokenHelper’ class.
The entire flow needs to only use simple HttpRequests.
I am going to break this into 3 parts:

1. Register a Remote App in SharePoint
2. Get the 'AccessToken’ via the Azure ACS and SharePoint dance
3. Call SharePoint REST Service with the AccessToken

Right now I am using the .Net HttpRequest class to perform this entire example and understand the entire flow. I am going to convert this into a JavaScript library soon so that it can be easily consumed by any external platforms. Ok, so lets get started.

Register a Remote App in SharePoint

There is some good guidance around registering an app for SharePoint but in our case we just want to register an app to perform the OAuth from a remote application so the only good option is to register it via ‘/_layouts/15/appregnew.aspx’.


There are 3 pieces of information that we need from the app registration:

• client_id          = App Id
• client_secret   = App Secret
• redirect_uri     = Redirect URI

Get the 'AccessToken’ via the Azure ACS and SharePoint dance

There are 3 steps to this dance:
Step 1: Get the Request token
Getting the request token just requires a well formed Url with all the 3 pieces of information that we collected during the app registration.


(See this app permissions section for all the Scope and Rights available in SharePoint Online.)
This Url would redirect to the msonline login screen and after you enter the credentials if you prompt you with the trust screen:




Once you trust the app, it would redirect back to the ‘redirect_uri’ configured during the app registration along with the request token in the querystring



Step 2: Get the Realm

(This method is taken directly from TokenHelper class. The targetApplicationUri is the SharePoint Online url)
Step 3: And finally, Get the Access Token
Now that we have the requestToken and realm, we need to create a POST request to ACS to get back the access token

Call SharePoint REST Service with the AccessToken

The only thing to remember before calling the SharePoint REST API’s is to make sure that we requested the correct Scope and Rights while generating the access token. In the code above I request ‘AllProfile.Manage’ as my scope so I can call the User Profile REST API’s.

That’s it. Once we have the access token we can call all the SharePoint REST API’s that fetches the data. For creating, updating and deleting we need to get 1 more piece of data which is RequestDigest. I will cover this in my next post on uploading documents to SkyDrive Pro using REST API.

Reference Links: 

Tips and FAQs: OAuth and remote apps for SharePoint 2013
OAuth authentication and authorization flow for apps that ask for access permissions on the fly in SharePoint 2013 (advanced topic)
Get started with the SharePoint 2013 REST service
Using the SharePoint 2013 REST service


Download the Code from https://github.com/jomit/OAuthO365