(DataFlex) Refresh a Xero OAuth2 Access Token

Refreshes a Xero OAuth2 access token. When an access token expires (after 1 hour), you will received a 401 status code indicating failure. When that happens, your application can run this code to refresh the access token, and then retry the request using the new access token. Refreshing an access token does not need user interaction (i.e. does not need to display a browser to have the user interactive authorize access).

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Use ChilkatAx-win32.pkg

Procedure Test
    Handle hoJsonToken
    Boolean iSuccess
    Handle hoOauth2
    Variant vSbJson
    Handle hoSbJson
    String sTemp1

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // It is assumed we previously obtained an OAuth2 access token.
    // This example loads the JSON access token file 
    // saved by this example: Get Xero OAuth2 Access Token

    Get Create (RefClass(cComChilkatJsonObject)) To hoJsonToken
    If (Not(IsComObjectCreated(hoJsonToken))) Begin
        Send CreateComObject of hoJsonToken
    End
    Get ComLoadFile Of hoJsonToken "qa_data/tokens/xero-access-token.json" To iSuccess
    If (iSuccess <> True) Begin
        Showln "Failed to load xero-access-token.json"
        Procedure_Return
    End

    // The access token JSON looks like this:

    // {
    //   "id_token": "eyJhbGci...dqRs3MctS_g",
    //   "access_token": "eyJhbGci...sUoAhoQ",
    //   "expires_in": 1800,
    //   "token_type": "Bearer",
    //   "refresh_token": "2f77b...bfc2ee16f",
    //   "scope": "openid profile email accounting.transactions accounting.settings payroll.employees offline_access"
    // }

    Get Create (RefClass(cComChilkatOAuth2)) To hoOauth2
    If (Not(IsComObjectCreated(hoOauth2))) Begin
        Send CreateComObject of hoOauth2
    End

    Set ComTokenEndpoint Of hoOauth2 To "https://identity.xero.com/connect/token"

    // Replace these with actual values.
    Set ComClientId Of hoOauth2 To "XERO_APP_OAUTH2_CLIENT_ID"
    Set ComClientSecret Of hoOauth2 To "XERO_APP_OAUTH2_CLIENT_SECRET"
    Set ComUseBasicAuth Of hoOauth2 To True

    // Get the "refresh_token"
    Get ComStringOf Of hoJsonToken "refresh_token" To sTemp1
    Set ComRefreshToken Of hoOauth2 To sTemp1

    // Send the HTTP POST to refresh the access token..
    Get ComRefreshAccessToken Of hoOauth2 To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoOauth2 To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get ComAccessTokenResponse Of hoOauth2 To sTemp1
    Showln sTemp1

    // The response contains a new access token and refresh token.
    // Update the JSON and re-save to the token file.
    Get ComAccessToken Of hoOauth2 To sTemp1
    Get ComUpdateString Of hoJsonToken "access_token" sTemp1 To iSuccess
    Get ComRefreshToken Of hoOauth2 To sTemp1
    Get ComUpdateString Of hoJsonToken "refresh_token" sTemp1 To iSuccess

    // Save the new JSON access token response to a file.
    Get Create (RefClass(cComChilkatStringBuilder)) To hoSbJson
    If (Not(IsComObjectCreated(hoSbJson))) Begin
        Send CreateComObject of hoSbJson
    End
    Set ComEmitCompact Of hoJsonToken To False
    Get pvComObject of hoSbJson to vSbJson
    Get ComEmitSb Of hoJsonToken vSbJson To iSuccess
    Get ComWriteFile Of hoSbJson "qa_data/tokens/xero-access-token.json" "utf-8" False To iSuccess

    Showln "OAuth2 authorization granted!"
    Get ComAccessToken Of hoOauth2 To sTemp1
    Showln "New Access Token = " sTemp1


End_Procedure