- What is smorken/ms-graph and what does it do?
- smorken/ms-graph is a Laravel package that wraps the Microsoft Graph API so you can query Microsoft 365 data such as users, mail, calendars, and files from PHP. It handles Azure AD authentication and access token retrieval and refresh, and exposes a fluent interface through Laravel's service container and config system. Its main value is the wiring around credentials, tokens, and HTTP requests rather than complete coverage of every Graph endpoint.
- How do I install smorken/ms-graph in a Laravel application?
- The package is not listed on Packagist, so you cannot install it with a normal Composer require alone. Add an explicit repositories entry in composer.json pointing at the Bitbucket VCS repository, then require the package. Because the repository is private, every build agent and developer machine needs Bitbucket credentials provisioned, and you should confirm the license before commercial use.
- How do I configure Azure AD credentials for smorken/ms-graph?
- The package follows Laravel's publishable config pattern, so you publish its configuration file and centralize your Azure AD tenant ID, client ID, and client secret there. The overview does not document exact config keys, so inspect the published file and the service provider after installation. Keep secrets out of version control and load them from environment variables.
- Does smorken/ms-graph support app-only client credentials and delegated user flows?
- The overview says the package handles Azure AD authentication and token management, but it does not confirm whether it supports both app-only client credentials and delegated authorization code flows. Many Laravel wrappers implement only the flow the author needed. Verify the supported flows in the source before committing, especially if you need delegated access to a signed-in user's mail or calendar.
- How does smorken/ms-graph cache and refresh access tokens?
- The package claims to retrieve and refresh access tokens automatically, but the overview does not state where tokens are cached or persisted. Because this code sits in the authentication path and handles client secrets and bearer tokens, review the source to see whether tokens are cached in memory, cache, database, or session, and whether any logging could expose them. Confirm the refresh behavior for long-running queue workers.
- Which Laravel and PHP versions does smorken/ms-graph support?
- No Laravel or PHP support matrix is stated in the available information, so you must check the illuminate/support constraint in composer.json and test against your target framework version. Re-check that constraint at every Laravel major upgrade. The package also has no documented test suite or CI configuration, so plan to validate it yourself.
- Does smorken/ms-graph handle Microsoft Graph pagination and 429 throttling?
- The available information does not confirm support for @odata.nextLink pagination or 429 backoff using the Retry-After header. These behaviors matter for large mail, calendar, and file result sets and for production reliability. Inspect the request layer or plan to implement pagination and retry handling in your application if the wrapper does not provide it.
- Can I make custom Microsoft Graph requests with smorken/ms-graph?
- The package is described as extensible for custom Graph API requests, which is important because a thin wrapper will not cover the full Graph surface. You will likely reach past the convenience methods for Teams, SharePoint, Intune, or less common endpoints. Check how the underlying Graph client is exposed so you can issue raw authenticated requests without fighting the abstraction.
- Is smorken/ms-graph safe to use in production?
- Treat it as high risk for production: it has a single author, no Packagist listing, no visible license metadata, and it handles client secrets and bearer tokens in the authentication path. The Bitbucket repository can also be made private or deleted, which would break builds unless you mirror it internally. Its best use may be as a reference implementation or short spike rather than a long-term dependency.
- What are the alternatives to smorken/ms-graph for Microsoft Graph in PHP?
- The official microsoft/microsoft-graph PHP SDK is the obvious baseline because it has vendor backing and avoids installing from a private VCS branch. You can wrap that SDK in a small Laravel service provider to get the same config and container integration with less supply-chain risk. Compare endpoint coverage, token handling, and Laravel version support before choosing a wrapper.