Classic ASP
RSAP Union API - Get OAuth2 Access Token

Demonstrates how to get an OAuth2 access token for the RSAP Union API. Note: This uses the client credentials flow, which does NOT require an interactive engagement using a browser.
Chilkat Classic ASP Downloads

Download Chilkat for Classic ASP
Classic ASP
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<%
success = 0

' This example assumes the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

set http = Server.CreateObject("Chilkat.Http")

' The following JSON is sent in the request body.

' {
'   "grant_type": "client_credentials",
'   "client_id": 1234,
'   "client_secret": "23456abcde"
' }

set json = Server.CreateObject("Chilkat.JsonObject")
success = json.UpdateString("grant_type","client_credentials")
success = json.UpdateInt("client_id",1234)
success = json.UpdateString("client_secret","23456abcde")

http.SetRequestHeader "Content-type","application/json"

' Add the client certificate TLS authentication.
set cert = Server.CreateObject("Chilkat.Cert")
success = cert.LoadFromFile("qa_data/certs_and_keys/union_client_certificate.crt")
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( cert.LastErrorText) & "</pre>"
    Response.End
End If

set privKey = Server.CreateObject("Chilkat.PrivateKey")
success = privKey.LoadAnyFormatFile("qa_data/certs_and_keys/union_client_certificate.nopass.key","")
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( privKey.LastErrorText) & "</pre>"
    Response.End
End If

' Associate the private key with the cert.
' This will fail if the private key is not actually the correct one that corresponds to the public key stored within the cert.
success = cert.SetPrivateKey(privKey)
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( cert.LastErrorText) & "</pre>"
    Response.End
End If

' Tell HTTP to use the cert for client TLS certificate authentication.
success = http.SetSslClientCert(cert)
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( http.LastErrorText) & "</pre>"
    Response.End
End If

set resp = Server.CreateObject("Chilkat.HttpResponse")
success = http.HttpJson("POST","https://api-test.rsap.ca/oauth/token",json,"application/json",resp)
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( http.LastErrorText) & "</pre>"
    Response.End
End If

set sbResponseBody = Server.CreateObject("Chilkat.StringBuilder")
success = resp.GetBodySb(sbResponseBody)
set jResp = Server.CreateObject("Chilkat.JsonObject")
success = jResp.LoadSb(sbResponseBody)
jResp.EmitCompact = 0

Response.Write "<pre>" & Server.HTMLEncode( "Response Body:") & "</pre>"
Response.Write "<pre>" & Server.HTMLEncode( jResp.Emit()) & "</pre>"

respStatusCode = resp.StatusCode
Response.Write "<pre>" & Server.HTMLEncode( "Response Status Code = " & respStatusCode) & "</pre>"
If (respStatusCode >= 400) Then
    Response.Write "<pre>" & Server.HTMLEncode( "Response Header:") & "</pre>"
    Response.Write "<pre>" & Server.HTMLEncode( resp.Header) & "</pre>"
    Response.Write "<pre>" & Server.HTMLEncode( "Failed.") & "</pre>"
    Response.End
End If

' Sample JSON response:
' (Sample code for parsing the JSON response is shown below)

' {
'   "token_type": "Bearer",
'   "expires_in": 3600,
'   "access_token": "eyJ0eXAi...LnE"
' }

' This token expires in 1 hour.  Your application could re-use the same token for up to an hour,
' or it can simply get a new access token before each request (if you're not doing too many requests).
success = jResp.WriteFile("qa_data/tokens/rsapToken.json")

%>
</body>
</html>