(DataFlex) ETrade OAuth1 Authorization (3-legged) Step 1

Demonstrates the first step in 3-legged OAuth1 authorization for the ETrade REST API. This example sends an HTTP request to the "request token URL" to get a request token that begins the OAuth1 process. (See https://apisb.etrade.com/docs/api/authorization/request_token.html )

This example uses the sandbox request token URL. The live request token URL would be "https://api.etrade.com/oauth/request_token".

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Use ChilkatAx-win32.pkg

Procedure Test
    String sConsumerKey
    String sConsumerSecret
    String sRequestTokenUrl
    Handle hoHttp
    Boolean iSuccess
    Variant vResp
    Handle hoResp
    Handle hoHashTab
    String sRequestToken
    String sRequestTokenSecret
    Handle hoJson
    Handle hoFac
    String sAuthorizeUrl
    Handle hoSbUrlForBrowser
    String sUrl
    String sTemp1
    Boolean bTemp1

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Move "ETRADE_CONSUMER_KEY" To sConsumerKey
    Move "ETRADE_CONSUMER_SECRET" To sConsumerSecret

    // Note: This example uses the sandbox request token URL.
    // The live Get Request Token Request URL is:
    // https://api.etrade.com/oauth/request_token
    // This example will use the Sandbox Token Request URL:
    Move "https://apisb.etrade.com/oauth/request_token" To sRequestTokenUrl

    Get Create (RefClass(cComChilkatHttp)) To hoHttp
    If (Not(IsComObjectCreated(hoHttp))) Begin
        Send CreateComObject of hoHttp
    End
    Move True To iSuccess

    Set ComOAuth1 Of hoHttp To True
    Set ComOAuthConsumerKey Of hoHttp To sConsumerKey
    Set ComOAuthConsumerSecret Of hoHttp To sConsumerSecret
    Set ComOAuthCallback Of hoHttp To "oob"

    Get ComQuickGetObj Of hoHttp sRequestTokenUrl To vResp
    If (IsComObject(vResp)) Begin
        Get Create (RefClass(cComChilkatHttpResponse)) To hoResp
        Set pvComObject Of hoResp To vResp
    End
    Get ComLastMethodSuccess Of hoHttp To bTemp1
    If (bTemp1 <> True) Begin
        Get ComLastErrorText Of hoHttp To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // If successful, the resp.BodyStr contains something like this:  
    // oauth_token=-Wa_KwAAAAAAxfEPAAABV8Qar4Q&oauth_token_secret=OfHY4tZBX2HK4f7yIw76WYdvnl99MVGB&oauth_callback_confirmed=true
    Get ComBodyStr Of hoResp To sTemp1
    Showln sTemp1

    Get Create (RefClass(cComChilkatHashtable)) To hoHashTab
    If (Not(IsComObjectCreated(hoHashTab))) Begin
        Send CreateComObject of hoHashTab
    End
    Get ComBodyStr Of hoResp To sTemp1
    Get ComAddQueryParams Of hoHashTab sTemp1 To iSuccess

    Get ComLookupStr Of hoHashTab "oauth_token" To sRequestToken
    Get ComLookupStr Of hoHashTab "oauth_token_secret" To sRequestTokenSecret
    Set ComOAuthTokenSecret Of hoHttp To sRequestTokenSecret

    Send Destroy of hoResp

    Showln "oauth_token = " sRequestToken
    Showln "oauth_token_secret = " sRequestTokenSecret

    // Save this request token for the next step..
    Get Create (RefClass(cComChilkatJsonObject)) To hoJson
    If (Not(IsComObjectCreated(hoJson))) Begin
        Send CreateComObject of hoJson
    End
    Get ComAppendString Of hoJson "oauth_token" sRequestToken To iSuccess
    Get ComAppendString Of hoJson "oauth_token_secret" sRequestTokenSecret To iSuccess

    Get Create (RefClass(cComCkFileAccess)) To hoFac
    If (Not(IsComObjectCreated(hoFac))) Begin
        Send CreateComObject of hoFac
    End
    Get ComEmit Of hoJson To sTemp1
    Get ComWriteEntireTextFile Of hoFac "qa_data/tokens/etrade_request_token.json" sTemp1 "utf-8" False To iSuccess

    // ---------------------------------------------------------------------------

    // The next step is to form a URL to send to the authorizeUrl
    // This is an HTTP GET that we load into a popup browser.
    Move "https://us.etrade.com/e/t/etws/authorize" To sAuthorizeUrl

    Get Create (RefClass(cComChilkatStringBuilder)) To hoSbUrlForBrowser
    If (Not(IsComObjectCreated(hoSbUrlForBrowser))) Begin
        Send CreateComObject of hoSbUrlForBrowser
    End
    Get ComAppend Of hoSbUrlForBrowser sAuthorizeUrl To iSuccess
    Get ComAppend Of hoSbUrlForBrowser "?key=" To iSuccess
    Get ComAppend Of hoSbUrlForBrowser sConsumerKey To iSuccess
    Get ComAppend Of hoSbUrlForBrowser "&token=" To iSuccess
    Get ComAppend Of hoSbUrlForBrowser sRequestToken To iSuccess
    Get ComGetAsString Of hoSbUrlForBrowser To sUrl

    // At this point, your application should load the URL in a browser.
    // For example, 
    // in C#: System.Diagnostics.Process.Start(url);
    // in Java: Desktop.getDesktop().browse(new URI(url));
    // in VBScript: Set wsh=WScript.CreateObject("WScript.Shell")
    //              wsh.Run url
    // in Xojo: ShowURL(url)  (see http://docs.xojo.com/index.php/ShowURL)
    // in Dataflex: Runprogram Background "c:\Program Files\Internet Explorer\iexplore.exe" sUrl        
    // The Microsoft account owner would interactively accept or deny the authorization request.

    // Add the code to load the url in a web browser here...
    // Add the code to load the url in a web browser here...
    // Add the code to load the url in a web browser here...

    // The ETrade account owner will login and grant access to the application.
    // A short verifier code will be displayed (as shown below), and this must be copy-and-pasted
    // into the next step to Complete the 3-legged OAuth1 Authorization 

    // Note: The browser will NOT automatically direct you to the next page.
    // You should copy the verifier code, close the browser, and then paste the verifier
    // code into your application.

    // 


End_Procedure