(Node.js) citi Developer OAuth2 Client Credentials Grant

Get access token for your application credentials. You can use this for citi APIs which do not require customer credential verification and consent (e.g. Onboarding).

For more information, see https://sandbox.developerhub.citi.com/api/united-states/retail-bank/identity-security/authorize/documentation

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    var http = new chilkat.Http();
    var success;

    // Implements the following CURL command:

    // curl --request POST \
    //   --url https://sandbox.apihub.citi.com/gcb/api/clientCredentials/oauth2/token/us/gcb \
    //   --header 'accept: application/json' \
    //   --user client-id:client-secret \
    //   --header 'content-type: application/x-www-form-urlencoded' \
    //   --data 'grant_type=client_credentials&scope=%2Fapi'

    http.Login = "client-id";
    http.Password = "client-secret";

    var req = new chilkat.HttpRequest();
    req.HttpVerb = "POST";
    req.Path = "/gcb/api/clientCredentials/oauth2/token/us/gcb";
    req.ContentType = "application/x-www-form-urlencoded";
    req.AddParam("grant_type","client_credentials");
    req.AddParam("scope","/api");
    req.AddHeader("accept","application/json");

    // resp: HttpResponse
    var resp = http.PostUrlEncoded("https://sandbox.apihub.citi.com/gcb/api/clientCredentials/oauth2/token/us/gcb",req);
    if (http.LastMethodSuccess == false) {
        console.log(http.LastErrorText);
        return;
    }

    var sbResponseBody = new chilkat.StringBuilder();
    resp.GetBodySb(sbResponseBody);
    var jResp = new chilkat.JsonObject();
    jResp.LoadSb(sbResponseBody);
    jResp.EmitCompact = false;

    console.log("Response Body:");
    console.log(jResp.Emit());

    var respStatusCode = resp.StatusCode;
    console.log("Response Status Code = " + respStatusCode);
    if (respStatusCode >= 400) {
        console.log("Response Header:");
        console.log(resp.Header);
        console.log("Failed.");

        return;
    }

    success = jResp.WriteFile("qa_data/tokens/citi_client_credentials.json");
    if (success == false) {
        console.log("Failed to save JSON access token file.");
        return;
    }

    //  Sample JSON response:
    //  (Sample code for parsing the JSON response is shown below)

    //  {
    //    "token_type": "bearer",
    //    "access_token": "AAIkMjdh ... 3fsWb7zJ0s",
    //    "expires_in": 1800,
    //    "consented_on": 1584817860,
    //    "scope": "/api"
    //  }

    //  Sample code for parsing the JSON response...
    //  Use the following online tool to generate parsing code from sample JSON:
    //  Generate Parsing Code from JSON

    var token_type = jResp.StringOf("token_type");
    var access_token = jResp.StringOf("access_token");
    var expires_in = jResp.IntOf("expires_in");
    var consented_on = jResp.IntOf("consented_on");
    var scope = jResp.StringOf("scope");

}

chilkatExample();