(Java) RSAP Union API - Get OAuth2 Access Token

Demonstrates how to get an OAuth2 access token for the RSAP Union API. Note: This uses the client credentials flow, which does NOT require an interactive engagement using a browser.

For more information, see https://app.swaggerhub.com/apis-docs/pderas/RSAP/2.0.1#/Authentication/getOauthToken

Chilkat Java Downloads Java Libs for Windows, MacOS, Linux, Alpine Linux, Solaris Java Libs for Android

import com.chilkatsoft.*;

public class ChilkatExample {

  static {
    try {
        System.loadLibrary("chilkat");
    } catch (UnsatisfiedLinkError e) {
      System.err.println("Native code library failed to load.\n" + e);
      System.exit(1);
    }
  }

  public static void main(String argv[])
  {
    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    CkHttp http = new CkHttp();
    boolean success;

    // The following JSON is sent in the request body.

    // {
    //   "grant_type": "client_credentials",
    //   "client_id": 1234,
    //   "client_secret": "23456abcde"
    // }

    CkJsonObject json = new CkJsonObject();
    json.UpdateString("grant_type","client_credentials");
    json.UpdateInt("client_id",1234);
    json.UpdateString("client_secret","23456abcde");

    http.SetRequestHeader("Content-type","application/json");

    // Add the client certificate TLS authentication.
    CkCert cert = new CkCert();
    success = cert.LoadFromFile("qa_data/certs_and_keys/union_client_certificate.crt");
    if (success == false) {
        System.out.println(cert.lastErrorText());
        return;
        }

    CkPrivateKey privKey = new CkPrivateKey();
    success = privKey.LoadAnyFormatFile("qa_data/certs_and_keys/union_client_certificate.nopass.key","");
    if (success == false) {
        System.out.println(privKey.lastErrorText());
        return;
        }

    // Associate the private key with the cert.
    // This will fail if the private key is not actually the correct one that corresponds to the public key stored within the cert.
    success = cert.SetPrivateKey(privKey);
    if (success == false) {
        System.out.println(cert.lastErrorText());
        return;
        }

    // Tell HTTP to use the cert for client TLS certificate authentication.
    success = http.SetSslClientCert(cert);
    if (success == false) {
        System.out.println(http.lastErrorText());
        return;
        }

    CkHttpResponse resp = http.PostJson3("https://api-test.rsap.ca/oauth/token","application/json",json);
    if (http.get_LastMethodSuccess() == false) {
        System.out.println(http.lastErrorText());
        return;
        }

    CkStringBuilder sbResponseBody = new CkStringBuilder();
    resp.GetBodySb(sbResponseBody);
    CkJsonObject jResp = new CkJsonObject();
    jResp.LoadSb(sbResponseBody);
    jResp.put_EmitCompact(false);

    System.out.println("Response Body:");
    System.out.println(jResp.emit());

    int respStatusCode = resp.get_StatusCode();
    System.out.println("Response Status Code = " + respStatusCode);
    if (respStatusCode >= 400) {
        System.out.println("Response Header:");
        System.out.println(resp.header());
        System.out.println("Failed.");

        return;
        }

    // Sample JSON response:
    // (Sample code for parsing the JSON response is shown below)

    // {
    //   "token_type": "Bearer",
    //   "expires_in": 3600,
    //   "access_token": "eyJ0eXAi...LnE"
    // }

    // This token expires in 1 hour.  Your application could re-use the same token for up to an hour,
    // or it can simply get a new access token before each request (if you're not doing too many requests).
    success = jResp.WriteFile("qa_data/tokens/rsapToken.json");
  }
}