<ConnectionManager Name="Azure Management" RuntimeVersion="" Help="http://www.cozyroc.com/ssis/azure-management-connection" xmlns="http://www.cozyroc.com/schema/rcm-config-1.0.xsd">
	<Service EndPoint="https://management.azure.com/" />

	<Authentication Name="OAuth 2">
		<Documentation />
		<Test Url="/subscriptions?$top=1" />
		<Token Url="{{=OAuth2.sign_in_url}}" Result="{{=response.access_token}}">
			<Parameters>
				<Parameter Name="response_type" Value="{{=OAuth2.sign_in_response_type}}" />
				<Parameter Name="client_id" Value="{{=OAuth2.client_id}}" />
				<Parameter Name="redirect_uri" Value="{{=OAuth2.redirect_uri}}" />
				<Parameter Name="resource" Value="https://management.azure.com/" />
			</Parameters>

			<Authorized Id="{{=OAuth2.redirect_uri}}" Result="{{=
				connection.execute({
					url: OAuth2.authorization_url,
					method: OAuth2.authorization_method,
					parameters: {
						code: response.code,
						grant_type: OAuth2.grant_type,
						client_id: OAuth2.client_id,
						client_secret: OAuth2.client_secret,
						redirect_uri: OAuth2.redirect_uri,
						resource: 'https://management.azure.com/'
			} })}}" />

			<Refresh Url="{{=OAuth2.refresh_token_url}}" Method="POST" Result="{{=response.refresh_token}}" Expiration="{{=Date.now() + (response.expires_in - 300) * 1000}}">
				<Parameters>
					<Parameter Name="client_id" Value="{{=OAuth2.client_id}}" />
					<Parameter Name="redirect_uri" Value="{{=OAuth2.redirect_uri}}" />
					<Parameter Name="refresh_token" Value="{{=token.Refresh}}" />
					<Parameter Name="grant_type" Value="refresh_token" />
				</Parameters>
			</Refresh>
		</Token>

		<Parameters>
			<Parameter Name="Authorization" Value="Bearer {{=token.Access}}" Type="HttpHeader" />
			<Parameter Name="api-version" Value="2020-07-01" Type="QueryString" />
		</Parameters>
	</Authentication>

	<Resources>
		<Template>
			<Field Name="ShortText" DataType="DT_WSTR" Length="255" />
			<Field Name="LongText" DataType="DT_WSTR" Length="1000" />
			<Field Name="DateTime" DataType="DT_DBTIMESTAMP" />
			<Field Name="Date" DataType="DT_DBDATE" />

			<Resource Name="Base">
				<Read Result="{{=response}}">
					<Parameters>
						<Parameter Name="$skipToken" Value="{{=parameters.iterator}}" />
						<Parameter Name="$top" Value="{{=parameters.batchSize}}" />
						<Parameter Name="_includeUserParameters" Value="{{=parameters}}" />
					</Parameters>

					<Iterator>
						<Next Value="{{=new Uri(response.nextLink).getQueryParamValue('$skiptoken')}}" />
					</Iterator>
				</Read>

				<Create Method="POST">
					<Parameters>
						<Parameter Name="_includeUserParameters" Value="{{=parameters}}" />
						<Parameter Name="application/json" Value="{{=item}}" Type="Body" />
					</Parameters>
				</Create>

				<Update Method="PUT">
					<Parameters>
						<Parameter Name="_includeUserParameters" Value="{{=parameters}}" />
						<Parameter Name="application/json" Value="{{=item}}" Type="Body" />
					</Parameters>
				</Update>

				<Delete Method="DELETE" />
			</Resource>
		</Template>
	</Resources>

	<Script>
		<Module Name="Main">
			<![CDATA[
require('underscore');
require('Uri');

		]]>
		</Module>

		<Module Name="OAuth 2">
			<![CDATA[
// See RFC 6749 (https://tools.ietf.org/html/rfc6749) for familiarizing with OAuth2 authorization flows-related terms and concepts 
var OAuth2 = {
	client_id: "54792167-0ca7-4104-8539-525073c4b85b", // required. The Client ID.
	sign_in_url: "https://login.microsoftonline.com/common/oauth2/authorize", // required. The starting endpoint in the authorization server. 
	sign_in_response_type: "code", // optional. The value for the "response_type" parameter in the initiating call. Usually "code", but can also be "token", "id_token".
	authorization_url: "https://login.microsoftonline.com/common/oauth2/token", // required. The endpoint for exchanging authorization code for an access token.
	authorization_method: "POST", // required. Usually the authorization URL is accessed via a POST request.
	redirect_uri: "https://www.cozyroc.com/oauth_callback", // required. The callback URL to be called after autherization. If the default value doesn't meet requirements, need to setup "Token.Authorized.LocalListenUrl".
	grant_type: "authorization_code", // optional. Can also be "client_credentials" or "password" (see https://auth0.com/docs/applications/reference/grant-types-available )
	refresh_token_url: "https://login.microsoftonline.com/common/oauth2/token" // required, if the authentication needs to support renewing access tokens
};

		]]>
		</Module>
	</Script>
</ConnectionManager>