PureBasic

Okta: Refresh Access Token with the Auth Code Flow

See more Okta OAuth/OIDC Examples

Demonstrates how to refresh a token that was obtained using the authorization code flow. PureBasic

IncludeFile "CkStringBuilder.pb"
IncludeFile "CkJsonObject.pb"
IncludeFile "CkOAuth2.pb"

Procedure ChilkatExample()

    success.i = 0

    ; This example requires the Chilkat API to have been previously unlocked.
    ; See Global Unlock Sample for sample code.

    ; See Get Okta Access Token using Authorization Code Flow with PKCE 
    ; for sample code showing how to obtain an Okta access token using the authorization code flow for native apps (with PKCE).

    jsonToken.i = CkJsonObject::ckCreate()
    If jsonToken.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkJsonObject::ckLoadFile(jsonToken,"qa_data/tokens/okta.json")
    If success <> 1
        Debug "Failed to load myob.json"
        CkJsonObject::ckDispose(jsonToken)
        ProcedureReturn
    EndIf

    oauth2.i = CkOAuth2::ckCreate()
    If oauth2.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkOAuth2::setCkTokenEndpoint(oauth2, "https://{yourOktaDomain}/oauth2/default/v1/token")

    ; Replace these with actual values.
    CkOAuth2::setCkClientId(oauth2, "OKTA_CLIENT_ID")
    CkOAuth2::setCkClientSecret(oauth2, "OKTA_CLIENT_SECRET")

    ; Get the "refresh_token"
    CkOAuth2::setCkRefreshToken(oauth2, CkJsonObject::ckStringOf(jsonToken,"refresh_token"))

    ; Send the HTTP POST to refresh the access token..
    CkOAuth2::setCkVerboseLogging(oauth2, 1)
    success = CkOAuth2::ckRefreshAccessToken(oauth2)
    If success <> 1
        Debug CkOAuth2::ckLastErrorText(oauth2)
        CkJsonObject::ckDispose(jsonToken)
        CkOAuth2::ckDispose(oauth2)
        ProcedureReturn
    EndIf

    ; Load the access token response into the json object 
    CkJsonObject::ckLoad(jsonToken,CkOAuth2::ckAccessTokenResponse(oauth2))

    ; Save the new JSON access token response to a file.
    ; The access + refresh tokens contained in this JSON will be needed for the next refresh.
    sbJson.i = CkStringBuilder::ckCreate()
    If sbJson.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkJsonObject::setCkEmitCompact(jsonToken, 0)
    CkJsonObject::ckEmitSb(jsonToken,sbJson)
    CkStringBuilder::ckWriteFile(sbJson,"qa_data/tokens/okta.json","utf-8",0)

    Debug "OAuth2 authorization granted!"
    Debug "New Access Token = " + CkOAuth2::ckAccessToken(oauth2)


    CkJsonObject::ckDispose(jsonToken)
    CkOAuth2::ckDispose(oauth2)
    CkStringBuilder::ckDispose(sbJson)


    ProcedureReturn
EndProcedure