(MFC) ETrade OAuth1 Authorization (3-legged) Step 1

Demonstrates the first step in 3-legged OAuth1 authorization for the ETrade REST API. This example sends an HTTP request to the "request token URL" to get a request token that begins the OAuth1 process. (See https://apisb.etrade.com/docs/api/authorization/request_token.html )

This example uses the sandbox request token URL. The live request token URL would be "https://api.etrade.com/oauth/request_token".

Chilkat C/C++ Library Downloads MS Visual C/C++ Libs

See Also: Using MFC CString in Chilkat

#include <CkHttp.h>
#include <CkHttpResponse.h>
#include <CkHashtable.h>
#include <CkJsonObject.h>
#include <CkFileAccess.h>
#include <CkStringBuilder.h>

void ChilkatSample(void)
    {
    CkString strOut;

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    const char *consumerKey = "ETRADE_CONSUMER_KEY";
    const char *consumerSecret = "ETRADE_CONSUMER_SECRET";

    // Note: This example uses the sandbox request token URL.
    // The live Get Request Token Request URL is:
    // https://api.etrade.com/oauth/request_token
    // This example will use the Sandbox Token Request URL:
    const char *requestTokenUrl = "https://apisb.etrade.com/oauth/request_token";

    CkHttp http;
    bool success = true;

    http.put_OAuth1(true);
    http.put_OAuthConsumerKey(consumerKey);
    http.put_OAuthConsumerSecret(consumerSecret);
    http.put_OAuthCallback("oob");

    CkHttpResponse *resp = http.QuickGetObj(requestTokenUrl);
    if (http.get_LastMethodSuccess() != true) {
        strOut.append(http.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // If successful, the resp.BodyStr contains something like this:  
    // oauth_token=-Wa_KwAAAAAAxfEPAAABV8Qar4Q&oauth_token_secret=OfHY4tZBX2HK4f7yIw76WYdvnl99MVGB&oauth_callback_confirmed=true
    strOut.append(resp->bodyStr());
    strOut.append("\r\n");

    CkHashtable hashTab;
    hashTab.AddQueryParams(resp->bodyStr());

    const char *requestToken = hashTab.lookupStr("oauth_token");
    const char *requestTokenSecret = hashTab.lookupStr("oauth_token_secret");
    http.put_OAuthTokenSecret(requestTokenSecret);

    delete resp;

    strOut.append("oauth_token = ");
    strOut.append(requestToken);
    strOut.append("\r\n");
    strOut.append("oauth_token_secret = ");
    strOut.append(requestTokenSecret);
    strOut.append("\r\n");

    // Save this request token for the next step..
    CkJsonObject json;
    json.AppendString("oauth_token",requestToken);
    json.AppendString("oauth_token_secret",requestTokenSecret);

    CkFileAccess fac;
    fac.WriteEntireTextFile("qa_data/tokens/etrade_request_token.json",json.emit(),"utf-8",false);

    // ---------------------------------------------------------------------------

    // The next step is to form a URL to send to the authorizeUrl
    // This is an HTTP GET that we load into a popup browser.
    const char *authorizeUrl = "https://us.etrade.com/e/t/etws/authorize";

    CkStringBuilder sbUrlForBrowser;
    sbUrlForBrowser.Append(authorizeUrl);
    sbUrlForBrowser.Append("?key=");
    sbUrlForBrowser.Append(consumerKey);
    sbUrlForBrowser.Append("&token=");
    sbUrlForBrowser.Append(requestToken);
    const char *url = sbUrlForBrowser.getAsString();

    // At this point, your application should load the URL in a browser.
    // For example, 
    // in C#: System.Diagnostics.Process.Start(url);
    // in Java: Desktop.getDesktop().browse(new URI(url));
    // in VBScript: Set wsh=WScript.CreateObject("WScript.Shell")
    //              wsh.Run url
    // in Xojo: ShowURL(url)  (see http://docs.xojo.com/index.php/ShowURL)
    // in Dataflex: Runprogram Background "c:\Program Files\Internet Explorer\iexplore.exe" sUrl        
    // The Microsoft account owner would interactively accept or deny the authorization request.

    // Add the code to load the url in a web browser here...
    // Add the code to load the url in a web browser here...
    // Add the code to load the url in a web browser here...

    // The ETrade account owner will login and grant access to the application.
    // A short verifier code will be displayed (as shown below), and this must be copy-and-pasted
    // into the next step to Complete the 3-legged OAuth1 Authorization 

    // Note: The browser will NOT automatically direct you to the next page.
    // You should copy the verifier code, close the browser, and then paste the verifier
    // code into your application.

    // 


    SetDlgItemText(IDC_EDIT1,strOut.getUnicode());

    }