Visual FoxPro

ETrade OAuth1 Authorization (3-legged) Step 2

See more ETrade Examples

Demonstrates the final step in 3-legged OAuth1 authorization for the ETrade REST API. Example uses the OAuth1 verifier code that was copy-and-pasted from the browser in the 1st step. The end result of this final OAuth1 step is an access token that can be used to make ETrade REST API calls.

See https://apisb.etrade.com/docs/api/authorization/get_access_token.html

Visual FoxPro

LOCAL lnSuccess
LOCAL lcConsumerKey
LOCAL lcConsumerSecret
LOCAL lcRequestTokenUrl
LOCAL lcAuthorizeUrl
LOCAL lcAccessTokenUrl
LOCAL loHttp
LOCAL loJsonRequestToken
LOCAL lcRequestToken
LOCAL lcRequestTokenSecret
LOCAL loResp
LOCAL loHashTab
LOCAL lcAccessToken
LOCAL lcAccessTokenSecret
LOCAL loJson
LOCAL loFac

lnSuccess = 0

* This requires the Chilkat API to have been previously unlocked.
* See Global Unlock Sample for sample code.

lcConsumerKey = "ETRADE_CONSUMER_KEY"
lcConsumerSecret = "ETRADE_CONSUMER_SECRET"

lcRequestTokenUrl = "https://apisb.etrade.com/oauth/request_token"
lcAuthorizeUrl = "https://us.etrade.com/e/t/etws/authorize"
lcAccessTokenUrl = "https://apisb.etrade.com/oauth/access_token"

loHttp = CreateObject('Chilkat.Http')
lnSuccess = 1

loHttp.OAuth1 = 1
loHttp.OAuthConsumerKey = lcConsumerKey
loHttp.OAuthConsumerSecret = lcConsumerSecret
loHttp.OAuthCallback = "oob"

loJsonRequestToken = CreateObject('Chilkat.JsonObject')
lnSuccess = loJsonRequestToken.LoadFile("qa_data/tokens/etrade_request_token.json")
lcRequestToken = loJsonRequestToken.StringOf("oauth_token")
lcRequestTokenSecret = loJsonRequestToken.StringOf("oauth_token_secret")

* ------------------------------------------------------------------------------
* Exchange the OAuth Request Token for an OAuth Access Token.

loHttp.OAuthToken = lcRequestToken
loHttp.OAuthTokenSecret = lcRequestTokenSecret

* This is the verifier that was interactively copy-and-pasted from the browser back to our app.
loHttp.OAuthVerifier = "NJ07S"

* Use the explicit string "INCLUDE_OAUTH_TOKEN" to tell Chilkat to include the "oauth_token" param in the Authorization header field
loHttp.UncommonOptions = "INCLUDE_OAUTH_TOKEN"

loResp = CreateObject('Chilkat.HttpResponse')
lnSuccess = loHttp.HttpNoBody("GET",lcAccessTokenUrl,loResp)
IF (lnSuccess = 0) THEN
    ? loHttp.LastErrorText
    RELEASE loHttp
    RELEASE loJsonRequestToken
    RELEASE loResp
    CANCEL
ENDIF

* Make sure a successful response was received.
IF (loResp.StatusCode <> 200) THEN
    ? loResp.StatusLine
    ? loResp.Header
    ? loResp.BodyStr
    RELEASE loHttp
    RELEASE loJsonRequestToken
    RELEASE loResp
    CANCEL
ENDIF

* If successful, the resp.BodyStr contains something like this:
* oauth_token=85123455-fF41296Bi3daM8eCo9Y5vZabcdxXpRv864plYPOjr&oauth_token_secret=afiYJOgabcdSfGae7BDvJVVTwys8fUGpra5guZxbmFBZo
? loResp.BodyStr

loHashTab = CreateObject('Chilkat.Hashtable')
loHashTab.AddQueryParams(loResp.BodyStr)

lcAccessToken = loHashTab.LookupStr("oauth_token")
lcAccessTokenSecret = loHashTab.LookupStr("oauth_token_secret")

* The access token + secret is what should be saved and used for
* subsequent REST API calls.
? "Access Token = " + lcAccessToken
? "Access Token Secret = " + lcAccessTokenSecret

* Save this access token for future calls.
* Just in case we need user_id and screen_name, save those also..
loJson = CreateObject('Chilkat.JsonObject')
loJson.AppendString("oauth_token",lcAccessToken)
loJson.AppendString("oauth_token_secret",lcAccessTokenSecret)

loFac = CreateObject('Chilkat.FileAccess')
loFac.WriteEntireTextFile("qa_data/tokens/etrade.json",loJson.Emit(),"utf-8",0)

? "Success."

RELEASE loHttp
RELEASE loJsonRequestToken
RELEASE loResp
RELEASE loHashTab
RELEASE loJson
RELEASE loFac