Node.js

Okta: Refresh Access Token with the Auth Code Flow

See more Okta OAuth/OIDC Examples

Demonstrates how to refresh a token that was obtained using the authorization code flow. Node.js

NODEJS_PRELUDE

function chilkatExample() {

    var success = false;

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // See Get Okta Access Token using Authorization Code Flow with PKCE 
    // for sample code showing how to obtain an Okta access token using the authorization code flow for native apps (with PKCE).

    var jsonToken = new chilkat.JsonObject();
    success = jsonToken.LoadFile("qa_data/tokens/okta.json");
    if (success !== true) {
        console.log("Failed to load myob.json");
        return;
    }

    var oauth2 = new chilkat.OAuth2();

    oauth2.TokenEndpoint = "https://{yourOktaDomain}/oauth2/default/v1/token";

    // Replace these with actual values.
    oauth2.ClientId = "OKTA_CLIENT_ID";
    oauth2.ClientSecret = "OKTA_CLIENT_SECRET";

    // Get the "refresh_token"
    oauth2.RefreshToken = jsonToken.StringOf("refresh_token");

    // Send the HTTP POST to refresh the access token..
    oauth2.VerboseLogging = true;
    success = oauth2.RefreshAccessToken();
    if (success !== true) {
        console.log(oauth2.LastErrorText);
        return;
    }

    // Load the access token response into the json object 
    jsonToken.Load(oauth2.AccessTokenResponse);

    // Save the new JSON access token response to a file.
    // The access + refresh tokens contained in this JSON will be needed for the next refresh.
    var sbJson = new chilkat.StringBuilder();
    jsonToken.EmitCompact = false;
    jsonToken.EmitSb(sbJson);
    sbJson.WriteFile("qa_data/tokens/okta.json","utf-8",false);

    console.log("OAuth2 authorization granted!");
    console.log("New Access Token = " + oauth2.AccessToken);

}

chilkatExample();