(Node.js) Okta: Refresh Access Token with the Auth Code Flow

Demonstrates how to refresh a token that was obtained using the authorization code flow.

For more information, see https://developer.okta.com/docs/guides/implement-auth-code-pkce/use-flow/

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // See Get Okta Access Token using Authorization Code Flow with PKCE 
    // for sample code showing how to obtain an Okta access token using the authorization code flow for native apps (with PKCE).

    var jsonToken = new chilkat.JsonObject();
    var success = jsonToken.LoadFile("qa_data/tokens/okta.json");
    if (success !== true) {
        console.log("Failed to load myob.json");
        return;
    }

    var oauth2 = new chilkat.OAuth2();

    oauth2.TokenEndpoint = "https://{yourOktaDomain}/oauth2/default/v1/token";

    // Replace these with actual values.
    oauth2.ClientId = "OKTA_CLIENT_ID";
    oauth2.ClientSecret = "OKTA_CLIENT_SECRET";

    // Get the "refresh_token"
    oauth2.RefreshToken = jsonToken.StringOf("refresh_token");

    // Send the HTTP POST to refresh the access token..
    oauth2.VerboseLogging = true;
    success = oauth2.RefreshAccessToken();
    if (success !== true) {
        console.log(oauth2.LastErrorText);
        return;
    }

    // Load the access token response into the json object 
    jsonToken.Load(oauth2.AccessTokenResponse);

    // Save the new JSON access token response to a file.
    // The access + refresh tokens contained in this JSON will be needed for the next refresh.
    var sbJson = new chilkat.StringBuilder();
    jsonToken.EmitCompact = false;
    jsonToken.EmitSb(sbJson);
    sbJson.WriteFile("qa_data/tokens/okta.json","utf-8",false);

    console.log("OAuth2 authorization granted!");
    console.log("New Access Token = " + oauth2.AccessToken);

}

chilkatExample();