(Lianja) RSAP Union API - Get OAuth2 Access Token

Demonstrates how to get an OAuth2 access token for the RSAP Union API. Note: This uses the client credentials flow, which does NOT require an interactive engagement using a browser.

For more information, see https://app.swaggerhub.com/apis-docs/pderas/RSAP/2.0.1#/Authentication/getOauthToken

Chilkat Lianja Extension Download Chilkat Lianja Extension

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

loHttp = createobject("CkHttp")

// The following JSON is sent in the request body.

// {
//   "grant_type": "client_credentials",
//   "client_id": 1234,
//   "client_secret": "23456abcde"
// }

loJson = createobject("CkJsonObject")
loJson.UpdateString("grant_type","client_credentials")
loJson.UpdateInt("client_id",1234)
loJson.UpdateString("client_secret","23456abcde")

loHttp.SetRequestHeader("Content-type","application/json")

// Add the client certificate TLS authentication.
loCert = createobject("CkCert")
llSuccess = loCert.LoadFromFile("qa_data/certs_and_keys/union_client_certificate.crt")
if (llSuccess = .F.) then
    ? loCert.LastErrorText
    release loHttp
    release loJson
    release loCert
    return
endif

loPrivKey = createobject("CkPrivateKey")
llSuccess = loPrivKey.LoadAnyFormatFile("qa_data/certs_and_keys/union_client_certificate.nopass.key","")
if (llSuccess = .F.) then
    ? loPrivKey.LastErrorText
    release loHttp
    release loJson
    release loCert
    release loPrivKey
    return
endif

// Associate the private key with the cert.
// This will fail if the private key is not actually the correct one that corresponds to the public key stored within the cert.
llSuccess = loCert.SetPrivateKey(loPrivKey)
if (llSuccess = .F.) then
    ? loCert.LastErrorText
    release loHttp
    release loJson
    release loCert
    release loPrivKey
    return
endif

// Tell HTTP to use the cert for client TLS certificate authentication.
llSuccess = loHttp.SetSslClientCert(loCert)
if (llSuccess = .F.) then
    ? loHttp.LastErrorText
    release loHttp
    release loJson
    release loCert
    release loPrivKey
    return
endif

loResp = loHttp.PostJson3("https://api-test.rsap.ca/oauth/token","application/json",loJson)
if (loHttp.LastMethodSuccess = .F.) then
    ? loHttp.LastErrorText
    release loHttp
    release loJson
    release loCert
    release loPrivKey
    return
endif

loSbResponseBody = createobject("CkStringBuilder")
loResp.GetBodySb(loSbResponseBody)
loJResp = createobject("CkJsonObject")
loJResp.LoadSb(loSbResponseBody)
loJResp.EmitCompact = .F.

? "Response Body:"
? loJResp.Emit()

lnRespStatusCode = loResp.StatusCode
? "Response Status Code = " + str(lnRespStatusCode)
if (lnRespStatusCode >= 400) then
    ? "Response Header:"
    ? loResp.Header
    ? "Failed."
    release loResp
    release loHttp
    release loJson
    release loCert
    release loPrivKey
    release loSbResponseBody
    release loJResp
    return
endif

release loResp

// Sample JSON response:
// (Sample code for parsing the JSON response is shown below)

// {
//   "token_type": "Bearer",
//   "expires_in": 3600,
//   "access_token": "eyJ0eXAi...LnE"
// }

// This token expires in 1 hour.  Your application could re-use the same token for up to an hour,
// or it can simply get a new access token before each request (if you're not doing too many requests).
llSuccess = loJResp.WriteFile("qa_data/tokens/rsapToken.json")


release loHttp
release loJson
release loCert
release loPrivKey
release loSbResponseBody
release loJResp