JavaScript

RSAP Union API - Get OAuth2 Access Token

See more _Miscellaneous_ Examples

Demonstrates how to get an OAuth2 access token for the RSAP Union API. Note: This uses the client credentials flow, which does NOT require an interactive engagement using a browser. JavaScript

var success = false;

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

var http = new CkHttp();

// The following JSON is sent in the request body.

// {
//   "grant_type": "client_credentials",
//   "client_id": 1234,
//   "client_secret": "23456abcde"
// }

var json = new CkJsonObject();
json.UpdateString("grant_type","client_credentials");
json.UpdateInt("client_id",1234);
json.UpdateString("client_secret","23456abcde");

http.SetRequestHeader("Content-type","application/json");

// Add the client certificate TLS authentication.
var cert = new CkCert();
success = cert.LoadFromFile("qa_data/certs_and_keys/union_client_certificate.crt");
if (success == false) {
    console.log(cert.LastErrorText);
    return;
}

var privKey = new CkPrivateKey();
success = privKey.LoadAnyFormatFile("qa_data/certs_and_keys/union_client_certificate.nopass.key","");
if (success == false) {
    console.log(privKey.LastErrorText);
    return;
}

// Associate the private key with the cert.
// This will fail if the private key is not actually the correct one that corresponds to the public key stored within the cert.
success = cert.SetPrivateKey(privKey);
if (success == false) {
    console.log(cert.LastErrorText);
    return;
}

// Tell HTTP to use the cert for client TLS certificate authentication.
success = http.SetSslClientCert(cert);
if (success == false) {
    console.log(http.LastErrorText);
    return;
}

var resp = new CkHttpResponse();
success = http.HttpJson("POST","https://api-test.rsap.ca/oauth/token",json,"application/json",resp);
if (success == false) {
    console.log(http.LastErrorText);
    return;
}

var sbResponseBody = new CkStringBuilder();
resp.GetBodySb(sbResponseBody);
var jResp = new CkJsonObject();
jResp.LoadSb(sbResponseBody);
jResp.EmitCompact = false;

console.log("Response Body:");
console.log(jResp.Emit());

var respStatusCode = resp.StatusCode;
console.log("Response Status Code = " + respStatusCode);
if (respStatusCode >= 400) {
    console.log("Response Header:");
    console.log(resp.Header);
    console.log("Failed.");
    return;
}

// Sample JSON response:
// (Sample code for parsing the JSON response is shown below)

// {
//   "token_type": "Bearer",
//   "expires_in": 3600,
//   "access_token": "eyJ0eXAi...LnE"
// }

// This token expires in 1 hour.  Your application could re-use the same token for up to an hour,
// or it can simply get a new access token before each request (if you're not doing too many requests).
success = jResp.WriteFile("qa_data/tokens/rsapToken.json");