Get-OpenIDConnectToken.ps1

[CmdletBinding()]
PARAM(
    [Parameter(Mandatory=$true)][String] $CredentialPath,
    [Parameter(Mandatory=$true)][String] $Resource
)
    

try
{
    $Token = $null
    $Credential = [System.Management.Automation.PSCredential](Import-Clixml -Path $CredentialPath)
    $EndPointURL = 'https://sso.private.local/connect/oauth2/token'
    Write-Verbose -Message ('Connecting to "{0}"...' -f $EndPointURL)
    $UserName = $Credential.UserName
    $Password = [System.Runtime.InteropServices.Marshal]::PtrToStringAuto([System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($Credential.Password))
    $CredBase64 = [Convert]::ToBase64String([byte[]]("${UserName}:$Password".ToCharArray()))

    Write-Verbose -Message ('Using "{0}" resource to create access token...' -f $Resource)
    $Payload = "token_type=password&scope=openid+profile+$($Resource)&username=$($UserName)&password=$($Password)"

    Write-Verbose -Message ('Creating access token for "{0}"...' -f $Credential.UserName)
    [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
    $Token = Invoke-RestMethod -Method Post -Uri $EndPointURL -Body $Payload -ContentType 'application/x-www-form-urlencoded' -Headers @{"Authorization"="Basic $CredBase64"} -Verbose

    Write-Verbose -Message ('Created access token successfully : {0}' -f ($Token | Out-String))
}
catch
{
    Write-Verbose -Message $_.Exception.Message
}