Java Requires Chilkat v10.1.3+

Datev OAuth2 Access Token

See more Datev Examples

Demonstrates how to get a Datev OAuth2 access token from a desktop application or script. Chilkat2 Java

import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.OAuth2;
import com.chilkatsoft.chilkat2.StringBuilder;

public class ChilkatExample {

    public static void main(String[] args) {
        // To further clarify, see OAuth 2.0 Authorization Flow

        OAuth2 oauth2 = new OAuth2();

        // Your Datev app should use "http://localhost" (no trailing forward slash) for the redirect URL.
        oauth2.setListenPort(3017);

        // 

        oauth2.setAuthorizationEndpoint("https://login.datev.de/openidsandbox/authorize");
        oauth2.setTokenEndpoint("https://sandbox-api.datev.de/token");

        // Replace this with your actual client ID.
        oauth2.setClientId("DATEV_CLIENT_ID");
        oauth2.setClientSecret("DATEV_CLIENT_SECRET");

        oauth2.setCodeChallenge(true);
        oauth2.setCodeChallengeMethod("S256");

        oauth2.setScope("openid profile email datev:accounting:clients accounting:documents datev:accounting:extf-files-import");

        // Begin the OAuth2 authorization code flow.  This returns a URL that should be loaded in a browser.
        String url;
        try {
            url = oauth2.startAuth();

            // Launch the default browser on the system and navigate to the url.
            // The LaunchBrowser method was added in Chilkat v10.1.2.
            oauth2.launchBrowser(url);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // Wait for the interactive user to grant permission in the interactive browser session.
        // We'll wait for a max of 90 seconds.
        int numMsWaited = 0;
        while ((numMsWaited < 90000) && (oauth2.getAuthFlowState() < 3)) {
            oauth2.sleepMs(100);
            numMsWaited = numMsWaited + 100;
        }

        // If there was no response from the browser within 90 seconds, then
        // the AuthFlowState will be equal to 1 or 2.
        // 1: Waiting for Redirect. The OAuth2 background thread is waiting to receive the redirect HTTP request from the browser.
        // 2: Waiting for Final Response. The OAuth2 background thread is waiting for the final access token response.
        // In that case, cancel the background task started in the call to StartAuth.
        if (oauth2.getAuthFlowState() < 3) {
            oauth2.cancel();
            System.out.println("No response from the browser!");
            return;
        }

        // Check the AuthFlowState to see if authorization was granted, denied, or if some error occurred
        // The possible AuthFlowState values are:
        // 3: Completed with Success. The OAuth2 flow has completed, the background thread exited, and the successful JSON response is available in AccessTokenResponse property.
        // 4: Completed with Access Denied. The OAuth2 flow has completed, the background thread exited, and the error JSON is available in AccessTokenResponse property.
        // 5: Failed Prior to Completion. The OAuth2 flow failed to complete, the background thread exited, and the error information is available in the FailureInfo property.
        if (oauth2.getAuthFlowState() == 5) {
            System.out.println("OAuth2 failed to complete.");
            System.out.println(oauth2.getFailureInfo());
            return;
        }

        if (oauth2.getAuthFlowState() == 4) {
            System.out.println("OAuth2 authorization was denied.");
            System.out.println(oauth2.getAccessTokenResponse());
            return;
        }

        if (oauth2.getAuthFlowState() != 3) {
            System.out.println("Unexpected AuthFlowState:" + oauth2.getAuthFlowState());
            return;
        }

        // Save the full JSON access token response to a file.
        StringBuilder sbJson = new StringBuilder();
        sbJson.append(oauth2.getAccessTokenResponse());
        sbJson.writeFile("qa_data/tokens/datev.json", "utf-8", false);

        // The saved JSON response looks like this:

        // {
        //     "refresh_token": "ZDA5Y .... FFhTXc9",
        //     "refresh_token_expires_in": 39600,
        //     "id_token": "eyJ .... Q9w",
        //     "access_token": "MTM .... 1UDA9",
        //     "token_type": "bearer",
        //     "expires_in": 900
        // }

        System.out.println("OAuth2 authorization granted!");
        System.out.println("Access Token = " + oauth2.getAccessToken());
    }
}