(DataFlex) Add Custom Claims to JWT for Google Service Account OAuth2

Demonstrates how add custom claims to the JWT when getting a Google API OAuth2 access token using a JSON service account private key.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Use ChilkatAx-win32.pkg

Procedure Test
    Handle hoFac
    String sJsonKey
    Handle hoGAuth
    Variant vMoreClaims
    Handle hoMoreClaims
    Boolean iSuccess
    Variant vTlsSock
    Handle hoTlsSock
    Boolean iSuccess
    String sTemp1
    Boolean bTemp1

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // First load the JSON key into a string.
    Get Create (RefClass(cComCkFileAccess)) To hoFac
    If (Not(IsComObjectCreated(hoFac))) Begin
        Send CreateComObject of hoFac
    End
    Get ComReadEntireTextFile Of hoFac "qa_data/googleApi/ChilkatTest-ab2ecd52ef98.json" "utf-8" To sJsonKey
    Get ComLastMethodSuccess Of hoFac To bTemp1
    If (bTemp1 <> True) Begin
        Get ComLastErrorText Of hoFac To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // A JSON private key should look like this:

    // 	{
    // 	  "type": "service_account",
    // 	  "project_id": "chilkattest-1350",
    // 	  "private_key_id": "fa2e36ee26986eab628b59868af8bec1d1c64c38",
    // 	  "private_key": "-----BEGIN PRIVATE KEY-----\nMIIEvgIjFa...28N64N2n1E4FYzBZjSdy\n-----END PRIVATE KEY-----\n",
    // 	  "client_email": "598922945226-00rb0ppfg0sndajo6bhvd4v17jtj2d3a@developer.gserviceaccount.com",
    // 	  "client_id": "598922945226-00rb0ppfg0snd9jo7bhvd4v17jtj2d3a.apps.googleusercontent.com",
    // 	  "auth_uri": "https://accounts.google.com/o/oauth2/auth",
    // 	  "token_uri": "https://accounts.google.com/o/oauth2/token",
    // 	  "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
    // 	  "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/598922945226-00rb0ppfg0sndajo6bhvd4v17jtj2d3a%40developer.gserviceaccount.com"
    // 	}

    Get Create (RefClass(cComChilkatAuthGoogle)) To hoGAuth
    If (Not(IsComObjectCreated(hoGAuth))) Begin
        Send CreateComObject of hoGAuth
    End
    Set ComJsonKey Of hoGAuth To sJsonKey

    // Choose a scope.
    Set ComScope Of hoGAuth To "https://www.googleapis.com/auth/cloud-platform"

    // Request an access token that is valid for this many seconds.
    Set ComExpireNumSeconds Of hoGAuth To 3600

    // If the application is requesting delegated access:
    // The email address of the user for which the application is requesting delegated access,
    // then set the email address here. (Otherwise leave it empty.)
    Set ComSubEmailAddress Of hoGAuth To ""

    // --------------------------------------------------------------------------------------
    // To add custom claims, create JSON containing the claims to be added and call AddClaims.
    Get Create (RefClass(cComChilkatJsonObject)) To hoMoreClaims
    If (Not(IsComObjectCreated(hoMoreClaims))) Begin
        Send CreateComObject of hoMoreClaims
    End
    Get ComUpdateString Of hoMoreClaims "claimAbc" "valueAbc" To iSuccess
    Get ComUpdateString Of hoMoreClaims "claimXyz" "valueXyz" To iSuccess
    // ...
    Get pvComObject of hoMoreClaims to vMoreClaims
    Get ComAddClaims Of hoGAuth vMoreClaims To iSuccess
    // --------------------------------------------------------------------------------------

    // Connect to www.googleapis.com using TLS (TLS 1.2 is the default.)
    // The Chilkat socket object is used so that the connection can be established
    // through proxies or an SSH tunnel if desired.
    Get Create (RefClass(cComChilkatSocket)) To hoTlsSock
    If (Not(IsComObjectCreated(hoTlsSock))) Begin
        Send CreateComObject of hoTlsSock
    End
    Get ComConnect Of hoTlsSock "www.googleapis.com" 443 True 5000 To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoTlsSock To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Send the request to obtain the access token.
    Get pvComObject of hoTlsSock to vTlsSock
    Get ComObtainAccessToken Of hoGAuth vTlsSock To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoGAuth To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Examine the access token:
    Get ComAccessToken Of hoGAuth To sTemp1
    Showln "Access Token: " sTemp1


End_Procedure