Delphi ActiveX

MyInvois Malaysia Login as Intermediary System

See more Malaysia MyInvois Examples

Demonstrates how to get an OAuth2 access token with an intermediary that is representing a taxpayer (acting on behalf of a specific taxpayer). The OAuth2 access token can then be used to access MyInvois protected APIs. Delphi ActiveX

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Chilkat_TLB;

...

procedure TForm1.Button1Click(Sender: TObject);
var
success: Integer;
http: TChilkatHttp;
req: TChilkatHttpRequest;
resp: TChilkatHttpResponse;
json: TChilkatJsonObject;
access_token: WideString;
expires_in: Integer;
token_type: WideString;
scope: WideString;

begin
success := 0;

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Sends the following HTTP POST to get a MyInvois OAUth2 access token using client_credentials

// POST /connect/token HTTP/1.1
// Host: preprod-api.myinvois.hasil.gov.my
// Accept: */*
// Content-Length: <<variable>>
// Content-Type: application/x-www-form-urlencoded
// onbehalfof: C25845632020
// 
// client_id={YOUR_CLIENT_ID}&client_secret={YOUR_CLIENT_SECRET}&grant_type=client_credentials&scope=InvoicingAPI

http := TChilkatHttp.Create(Self);

req := TChilkatHttpRequest.Create(Self);

req.AddHeader('onbehalfof','C25845632020');

req.AddParam('grant_type','client_credentials');
req.AddParam('client_id','YOUR_CLIENT_ID');
req.AddParam('client_secret','YOUR_CLIENT_SECRET');
req.AddParam('scope','InvoicingAPI');

req.HttpVerb := 'POST';
req.ContentType := 'application/x-www-form-urlencoded';

resp := TChilkatHttpResponse.Create(Self);
success := http.HttpReq('https://preprod-api.myinvois.hasil.gov.my/connect/token',req.ControlInterface,resp.ControlInterface);
if (success = 0) then
  begin
    Memo1.Lines.Add(http.LastErrorText);
    Exit;
  end;

// Note: The returned access token is valid for a short amount of time.  Perhaps 1 hour.
// The access token is used in the "Authorization: Bearer <access_token>" header in subsequent requests until it expires.
// Your application would then need to get a new access token, and so on..

Memo1.Lines.Add('Response Status Code: ' + IntToStr(resp.StatusCode));
Memo1.Lines.Add('Response Body:');
Memo1.Lines.Add(resp.BodyStr);

// Here's a sample response:

// {
//   "access_token": "eyJhbGciOiJSUzI1...",
//   "expires_in": 3600,
//   "token_type": "Bearer",
//   "scope": "InvoicingAPI"
// }

json := TChilkatJsonObject.Create(Self);
json.Load(resp.BodyStr);
access_token := json.StringOf('access_token');
expires_in := json.IntOf('expires_in');
token_type := json.StringOf('token_type');
scope := json.StringOf('scope');

// To use an access token in a MyInvois API call, see Using a MyInvois Access Token in an API Request
end;