Microsoft Graph Proxy for PowerShell Clients¶

# ==========================================
# 1. ENVIRONMENT & PROXY CONFIGURATION
# ==========================================
$proxyUrl   = "http://{pam.contoso.com}:8800"

# Prompt the administrator for local proxy credentials using standard secure string prompts
# Note the syntax value formatting: user#asset_name
$proxyAuth  = Get-Credential -UserName "12Port-User#Asset-Name" -Message "Enter credentials for the NTLM Proxy Server ($proxyUrl)"

Write-Host "Configuring session-wide proxy settings with explicit credentials..." -ForegroundColor Cyan

# Instantiate and configure the global .NET WebProxy payload object
$proxy = New-Object System.Net.WebProxy($proxyUrl)
$proxy.UseDefaultCredentials = $false  # Explicitly prevent automatic Windows fallback login
$proxy.Credentials = $proxyAuth        # Inject proxy authentication object

# Register proxy settings into global WebRequest context for background SDK engine ingestion
[System.Net.WebRequest]::DefaultWebProxy = $proxy

# Enforce secure modern TLS compliance
[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12 -bor [System.Net.SecurityProtocolType]::Tls13

# ==========================================
# 2. CONNECT TO MICROSOFT GRAPH SDK
# ==========================================
# Ensure the authentication module is loaded into the session
Import-Module Microsoft.Graph.Authentication -ErrorAction SilentlyContinue

# Disconnect cleanly (this resets the internal context natively)
Disconnect-MgGraph -ErrorAction SilentlyContinue

# Proceed with token injection
$rawToken = "fake_jwt_token" # Replace with real token injection mechanism if required
$secureToken = ConvertTo-SecureString -String $rawToken -AsPlainText -Force
Connect-MgGraph -AccessToken $secureToken -Environment Global

# ==========================================
# 3. EXECUTE GRAPH QUERY
# ==========================================
Write-Host "Fetching users from Graph API..." -ForegroundColor Cyan
try {
    # Execute standard Graph commands normally
    Get-MgUser -Top 5 | Select-Object DisplayName, Mail
}
catch {
    Write-Host "=== Get-MgUser failed - exception chain ===" -ForegroundColor Red
    $e = $_.Exception
    while ($e) {
        Write-Host ($e.GetType().FullName + " :: " + $e.Message) -ForegroundColor Yellow
        $e = $e.InnerException
    }
}

# ==========================================
# 1. ENVIRONMENT & PROXY CONFIGURATION
# ==========================================
$proxyUrl = "http://{pam.contoso.com}:8800"

# Securely prompt the user for proxy credentials via a standard popup/prompt
$proxyAuth = Get-Credential -UserName "12Port-User#Asset-Name" -Message "Enter credentials for the NTLM Proxy Server ($proxyUrl)"

Write-Host "Configuring session-wide proxy settings with explicit credentials..." -ForegroundColor Cyan

# Configure the global .NET environment proxy (used by the Graph SDK background engine)
$proxy = New-Object System.Net.WebProxy($proxyUrl)
$proxy.UseDefaultCredentials = $false  # Disable automatic login fallback
$proxy.Credentials = $proxyAuth        # Apply the user's provided credentials
[System.Net.WebRequest]::DefaultWebProxy = $proxy

# Force modern TLS compliance
[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12 -bor [System.Net.SecurityProtocolType]::Tls13

# ==========================================
# 2. CONNECT TO MICROSOFT GRAPH SDK
# ==========================================
# Ensure the authentication module is loaded into the session
Import-Module Microsoft.Graph.Authentication -ErrorAction SilentlyContinue

# Disconnect cleanly (this resets the internal context natively)
Disconnect-MgGraph -ErrorAction SilentlyContinue

# Proceed with token injection
$rawToken = "fake_jwt_token" # Replace with real token injection mechanism if required
$secureToken = ConvertTo-SecureString -String $rawToken -AsPlainText -Force
Connect-MgGraph -AccessToken $secureToken -Environment Global

# ==========================================
# REPEATABLE LOOP FOR GRAPH QUERIES & UPDATES
# ==========================================
do {
    # ==========================================
    # 3. DYNAMIC PROMPT FOR METHOD & PATH
    # ==========================================
    Write-Host "`n=== MICROSOFT GRAPH DYNAMIC INTERFACE ===" -ForegroundColor Cyan

    # Prompt 1: Choose the HTTP Operation
    $methodChoice = Read-Host "Choose Method: [1] GET (Read), [2] PATCH (Update), [3] POST (Create/Action)"
    switch ($methodChoice) {
        "1"     { $method = "GET" }
        "2"     { $method = "PATCH" }
        "3"     { $method = "POST" }
        Default { $method = "GET" } # Default to safe read-only if they mess up
    }

    # Prompt 2: The Graph API Endpoint URI path
    $apiPath = Read-Host "Enter Graph URI Path (e.g., v1.0/users, v1.0/users/{id}, v1.0/groups)"
    if ([string]::IsNullOrWhiteSpace($apiPath)) { 
        Write-Host "API Path cannot be empty." -ForegroundColor Red
        continue 
    }

    # Initialize request parameters
    $requestArgs = @{
        Method  = $method
        Headers = @{ "ConsistencyLevel" = "eventual" }
    }

    # Handle Method-Specific Logic
    if ($method -eq "GET") {
        # Prompt 3: OData Query parameters (Only for GET requests)
        $queryString = Read-Host 'Enter Query Parameters (e.g., $select=id,displayName or leave blank)'

        $fullUri = $apiPath
        if (-not [string]::IsNullOrWhiteSpace($queryString)) {
            if (-not $queryString.StartsWith("?")) { $fullUri += "?" + $queryString }
            else { $fullUri += $queryString }
        }
        $requestArgs.Uri = $fullUri
    } 
    else {
            # PATCH / POST require a Body rather than URL query parameters
            $requestArgs.Uri = $apiPath
            Write-Host "Enter JSON Request Body (Type your JSON, then type 'DONE' or press Enter on an empty line when finished):" -ForegroundColor Yellow

            # Manually collect lines to avoid pipeline buffer bugs
            $jsonLines = @()
            while ($true) {
                $line = Read-Host
                if ([string]::IsNullOrEmpty($line) -or $line -eq "DONE") { break }
                $jsonLines += $line
            }
            $jsonBody = $jsonLines -join "`n"

            if ([string]::IsNullOrWhiteSpace($jsonBody)) {
                Write-Host "Error: PATCH and POST operations require a JSON body payload." -ForegroundColor Red
                continue 
            }

            $requestArgs.Body = $jsonBody
            $requestArgs.Headers += @{ "Content-Type" = "application/json" }
        }

    # ==========================================
    # 4. EXECUTE GRAPH REQUEST
    # ==========================================
    Write-Host "`nExecuting request: $method https://graph.microsoft.com/$($requestArgs.Uri)" -ForegroundColor Cyan

    try {
        # Splatting the arguments dynamically based on whether it's a GET, PATCH, or POST
        $response = Invoke-MgGraphRequest @requestArgs

        Write-Host "Operation completed successfully!" -ForegroundColor Green

        # Only handle data rendering if there actually is a response payload (PATCH often returns status 204 No Content)
        if ($null -ne $response) {
            if ($null -ne $response.value) {
                $data = $response.value
                Write-Host "Returned $($data.Count) record(s)." -ForegroundColor Green
            } else {
                $data = $response
            }

            # Interactively ask how the user wants to view the output
            $outputChoice = Read-Host "`nChoose output format: [T]able, [L]ist, [G]ridView, [O]bject Variable, or [D]efault Raw"
            switch ($outputChoice.ToUpper()) {
                "T" { $data | Format-Table }
                "L" { $data | Format-List }
                "G" { $data | Out-GridView -Title "Graph API Output: $apiPath" }
                "O" { 
                    $global:GraphOutput = $data
                    Write-Host "Data saved to global variable `$GraphOutput" -ForegroundColor Magenta
                }
                Default { $data }
            }
        }
    }
    catch {
        Write-Host "=== Graph API Request failed - exception chain ===" -ForegroundColor Red
        $e = $_.Exception
        while ($e) {
            Write-Host ($e.GetType().FullName + " :: " + $e.Message) -ForegroundColor Yellow
            $e = $e.InnerException
        }
    }

    # Prompt the user to see if they want to repeat the process
    Write-Host ""
    $repeatChoice = Read-Host "Would you like to run another operation? (Y/N)"

} while ($repeatChoice -eq "Y" -or $repeatChoice -eq "y")

Write-Host "`nExiting script. Goodbye!" -ForegroundColor Cyan