Java Requires Chilkat v11.0.0+

PRODA Get OAuth2 Access Token using JWT

See more PRODA Examples

Demonstrates how to get an OAuth2 access token for the PRODA Australian Government Online Services using a JWT. Chilkat2 Java

import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.Http;
import com.chilkatsoft.chilkat2.HttpRequest;
import com.chilkatsoft.chilkat2.HttpResponse;
import com.chilkatsoft.chilkat2.JsonObject;
import com.chilkatsoft.chilkat2.Jwt;
import com.chilkatsoft.chilkat2.PrivateKey;

public class ChilkatExample {

    public static void main(String[] args) {
        // This example requires the Chilkat API to have been previously unlocked.
        // See Global Unlock Sample for sample code.

        // First create a JWT to be sent in the POST to https://vnd.proda.humanservices.gov.au/mga/sps/oauth/oauth20/token

        PrivateKey privKey = new PrivateKey();

        // Load an RSA private key from a PEM file.
        // Chilkat provides alternative methods to load from other formats, or to load from a string or binary data.
        try {
            privKey.loadEncryptedPemFile("qa_data/pem/rsa_passwd.pem", "passwd");
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        Jwt jwt = new Jwt();

        // Build the JOSE header
        JsonObject jose = new JsonObject();
        // Use RS256.  Pass the string "RS384" or "RS512" to use RSA with SHA-384 or SHA-512.
        jose.appendString("alg", "RS256");
        jose.appendString("typ", "JWT");
        jose.appendString("kid", "test-device");

        // Now build the JWT claims (also known as the payload)
        JsonObject claims = new JsonObject();
        claims.appendString("iss", "9646844092");
        claims.appendString("sub", "test-device");
        claims.appendString("aud", "https://proda.humanservices.gov.au");

        // Set the timestamp of when the JWT was created to now.
        int curDateTime = jwt.genNumericDate(0);
        claims.addIntAt(-1, "iat", curDateTime);

        // Set the timestamp defining an expiration time (end time) for the token
        // to be now + 1 hour (3600 seconds)
        claims.addIntAt(-1, "exp", curDateTime + 3600);

        // Produce the smallest possible JWT:
        jwt.setAutoCompact(true);

        // Create the JWT token.  This is where the RSA signature is created.
        String jwtToken = jwt.createJwtPk(jose.emit(), claims.emit(), privKey);

        // ---------------------------------------------------------------------
        // Build and send the POST, which should look something like this:

        // POST https://vnd.proda.humanservices.gov.au/mga/sps/oauth/oauth20/token HTTP/1.1
        // Content-Type: application/x-www-form-urlencoded
        // Content-Length: 666
        // Host: vnd.proda.humanservices.gov.au
        //
        // grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Ajwt-bearer&assertion=<jwt>&client_id=VendorClient03

        Http http = new Http();

        HttpRequest req = new HttpRequest();
        req.setHttpVerb("POST");
        req.setContentType("application/x-www-form-urlencoded");

        // Add the request params.
        req.addParam("grant_type", "urn:ietf:params:oauth:grant-type:jwt-bearer");
        req.addParam("assertion", jwtToken);
        req.addParam("client_id", "VendorClient03");

        HttpResponse resp = new HttpResponse();
        try {
            http.httpReq("https://vnd.proda.humanservices.gov.au/mga/sps/oauth/oauth20/token", req, resp);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        System.out.println("Response status code = " + resp.getStatusCode());
        System.out.println("Response body:");
        System.out.println(resp.getBodyStr());
    }
}