(MFC) QuickBooks - Automatically Refresh Access Token with No User Interaction

Demonstrates how to automaticaly refresh an expired access token and retry the request after a 401 authorization error.

Chilkat C/C++ Library Downloads MS Visual C/C++ Libs

See Also: Using MFC CString in Chilkat

#include <CkJsonObject.h>
#include <CkRest.h>
#include <CkStringBuilder.h>
#include <CkOAuth2.h>
#include <CkDateTime.h>
#include <CkDtObj.h>

void ChilkatSample(void)
    {
    CkString strOut;

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Get our previously obtained OAuth2 access token, which should contain JSON like this:
    // {
    //   "expires_in": 3600,
    //   "x_refresh_token_expires_in": 8726400,
    //   "refresh_token": "L011546037639r ... 3vR2DrbOmg0Sdagw",
    //   "access_token": "eyJlbmMiOiJBMTI4Q0 ... oETJEMbeggg",
    //   "token_type": "bearer"
    // }

    CkJsonObject jsonToken;
    bool success = jsonToken.LoadFile("qa_data/tokens/qb-access-token.json");

    CkRest rest;

    // Connect using TLS.
    // A single REST object, once connected, can be used for many Quickbooks REST API calls.
    // The auto-reconnect indicates that if the already-established HTTPS connection is closed,
    // then it will be automatically re-established as needed.
    bool bAutoReconnect = true;
    success = rest.Connect("sandbox-quickbooks.api.intuit.com",443,true,bAutoReconnect);
    if (success != true) {
        strOut.append(rest.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    CkStringBuilder sbAuth;
    sbAuth.Append("Bearer ");
    sbAuth.Append(jsonToken.stringOf("access_token"));
    rest.put_Authorization(sbAuth.getAsString());

    rest.AddHeader("Accept","application/json");
    rest.put_AllowHeaderFolding(false);

    // The company ID is 123146096291789
    // The employee ID is 58
    const char *responseBody = rest.fullRequestNoBody("GET","/v3/company/123146096291789/employee/58?minorversion=45");
    if (rest.get_LastMethodSuccess() != true) {
        strOut.append(rest.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // If we get a 401 authorization error, then it's likely because the access token expired.
    // We can automatically refresh it without interaction from the user.
    if (rest.get_ResponseStatusCode() == 401) {

        CkOAuth2 oauth2;

        oauth2.put_TokenEndpoint("https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer");

        // Replace these with actual values.
        oauth2.put_ClientId("QUICKBOOKS-CLIENT-ID");
        oauth2.put_ClientSecret("QUICKBOOKS-CLIENT-SECRET");

        // Get the "refresh_token"
        oauth2.put_RefreshToken(jsonToken.stringOf("refresh_token"));

        // Send the HTTP POST to refresh the access token..
        success = oauth2.RefreshAccessToken();
        if (success != true) {
            strOut.append(oauth2.lastErrorText());
            strOut.append("\r\n");
            SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
            return;
        }

        strOut.append("New access token: ");
        strOut.append(oauth2.accessToken());
        strOut.append("\r\n");

        // Update the JSON with the new tokens.
        jsonToken.UpdateString("access_token",oauth2.accessToken());

        // Save the new JSON access token response to a file.
        // The access + refresh tokens contained in this JSON will be needed for the next refresh.
        CkStringBuilder sbJson;
        jsonToken.put_EmitCompact(false);
        jsonToken.EmitSb(sbJson);
        sbJson.WriteFile("qa_data/tokens/qb-access-token.json","utf-8",false);

        strOut.append("OAuth2 token refreshed!");
        strOut.append("\r\n");
        strOut.append("New Access Token = ");
        strOut.append(oauth2.accessToken());
        strOut.append("\r\n");

        sbAuth.Clear();
        sbAuth.Append("Bearer ");
        sbAuth.Append(oauth2.accessToken());
        rest.put_Authorization(sbAuth.getAsString());

        // Now retry the request with the refreshed access token...
        responseBody = rest.fullRequestNoBody("GET","/v3/company/123146096291789/employee/58?minorversion=45");
        if (rest.get_LastMethodSuccess() != true) {
            strOut.append(rest.lastErrorText());
            strOut.append("\r\n");
            SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
            return;
        }

    }

    // We should expect a 200 response if successful.
    if (rest.get_ResponseStatusCode() != 200) {
        strOut.append("Request Header: ");
        strOut.append("\r\n");
        strOut.append(rest.lastRequestHeader());
        strOut.append("\r\n");
        strOut.append("----");
        strOut.append("\r\n");
        strOut.append("Response StatusCode = ");
        strOut.appendInt(rest.get_ResponseStatusCode());
        strOut.append("\r\n");
        strOut.append("Response StatusLine: ");
        strOut.append(rest.responseStatusText());
        strOut.append("\r\n");
        strOut.append("Response Header:");
        strOut.append("\r\n");
        strOut.append(rest.responseHeader());
        strOut.append("\r\n");
        strOut.append(responseBody);
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // Load the JSON response into a JSON object for parsing.
    // A sample JSON response is shown below.
    CkJsonObject json;
    json.Load(responseBody);

    // These will be used for parsing date/time strings..
    CkDateTime dtime;
    bool bLocalTime = true;
    CkDtObj *dt = 0;

    // Show the JSON.   
    json.put_EmitCompact(false);
    strOut.append(json.emit());
    strOut.append("\r\n");

    // Get some information from the JSON..
    strOut.append("Name: ");
    strOut.append(json.stringOf("Employee.DisplayName"));
    strOut.append("\r\n");
    strOut.append("Id: ");
    strOut.append(json.stringOf("Employee.Id"));
    strOut.append("\r\n");
    strOut.append("City: ");
    strOut.append(json.stringOf("Employee.PrimaryAddr.City"));
    strOut.append("\r\n");
    strOut.append("PostalCode: ");
    strOut.append(json.stringOf("Employee.PrimaryAddr.PostalCode"));
    strOut.append("\r\n");

    // Load the CreateTime into a CkDateTime...
    dtime.SetFromTimestamp(json.stringOf("Employee.MetaData.CreateTime"));
    dt = dtime.GetDtObj(bLocalTime);
    strOut.appendInt(dt->get_Month());
    strOut.append("/");
    strOut.appendInt(dt->get_Day());
    strOut.append("/");
    strOut.appendInt(dt->get_Year());
    strOut.append("  ");
    strOut.appendInt(dt->get_Hour());
    strOut.append(":");
    strOut.appendInt(dt->get_Minute());
    strOut.append("\r\n");
    delete dt;

    strOut.append("Success.");
    strOut.append("\r\n");

    // Use this online tool to generate parsing code from sample JSON: 
    // Generate Parsing Code from JSON

    // ------------------------------------------------------
    // The JSON response looks like this:

    // {
    //   "Employee": {
    //     "SSN": "XXX-XX-XXXX",
    //     "PrimaryAddr": {
    //       "Id": "116",
    //       "Line1": "45 N. Elm Street",
    //       "City": "Middlefield",
    //       "CountrySubDivisionCode": "CA",
    //       "PostalCode": "93242"
    //     },
    //     "BillableTime": false,
    //     "domain": "QBO",
    //     "sparse": false,
    //     "Id": "98",
    //     "SyncToken": "0",
    //     "MetaData": {
    //       "CreateTime": "2015-07-24T09:34:35-07:00",
    //       "LastUpdatedTime": "2015-07-24T09:34:35-07:00"
    //     },
    //     "GivenName": "Bill",
    //     "FamilyName": "Miller",
    //     "DisplayName": "Bill Miller",
    //     "PrintOnCheckName": "Bill Miller",
    //     "Active": true,
    //     "PrimaryPhone": {
    //       "FreeFormNumber": "234-525-1234"
    //     }
    //   },
    //   "time": "2015-07-24T09:35:54.805-07:00"
    // 


    SetDlgItemText(IDC_EDIT1,strOut.getUnicode());

    }