JavaScript

MyInvois Malaysia Login as Intermediary System

See more Malaysia MyInvois Examples

Demonstrates how to get an OAuth2 access token with an intermediary that is representing a taxpayer (acting on behalf of a specific taxpayer). The OAuth2 access token can then be used to access MyInvois protected APIs. JavaScript

var success = false;

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Sends the following HTTP POST to get a MyInvois OAUth2 access token using client_credentials

// POST /connect/token HTTP/1.1
// Host: preprod-api.myinvois.hasil.gov.my
// Accept: */*
// Content-Length: <<variable>>
// Content-Type: application/x-www-form-urlencoded
// onbehalfof: C25845632020
// 
// client_id={YOUR_CLIENT_ID}&client_secret={YOUR_CLIENT_SECRET}&grant_type=client_credentials&scope=InvoicingAPI

var http = new CkHttp();

var req = new CkHttpRequest();

req.AddHeader("onbehalfof","C25845632020");

req.AddParam("grant_type","client_credentials");
req.AddParam("client_id","YOUR_CLIENT_ID");
req.AddParam("client_secret","YOUR_CLIENT_SECRET");
req.AddParam("scope","InvoicingAPI");

req.HttpVerb = "POST";
req.ContentType = "application/x-www-form-urlencoded";

var resp = new CkHttpResponse();
success = http.HttpReq("https://preprod-api.myinvois.hasil.gov.my/connect/token",req,resp);
if (success == false) {
    console.log(http.LastErrorText);
    return;
}

// Note: The returned access token is valid for a short amount of time.  Perhaps 1 hour.
// The access token is used in the "Authorization: Bearer <access_token>" header in subsequent requests until it expires.
// Your application would then need to get a new access token, and so on..

console.log("Response Status Code: " + resp.StatusCode);
console.log("Response Body:");
console.log(resp.BodyStr);

// Here's a sample response:

// {
//   "access_token": "eyJhbGciOiJSUzI1...",
//   "expires_in": 3600,
//   "token_type": "Bearer",
//   "scope": "InvoicingAPI"
// }

var json = new CkJsonObject();
json.Load(resp.BodyStr);
var access_token = json.StringOf("access_token");
var expires_in = json.IntOf("expires_in");
var token_type = json.StringOf("token_type");
var scope = json.StringOf("scope");

// To use an access token in a MyInvois API call, see Using a MyInvois Access Token in an API Request