(Tcl) ETrade OAuth1 Authorization (3-legged) Step 1

Demonstrates the first step in 3-legged OAuth1 authorization for the ETrade REST API. This example sends an HTTP request to the "request token URL" to get a request token that begins the OAuth1 process. (See https://apisb.etrade.com/docs/api/authorization/request_token.html )

This example uses the sandbox request token URL. The live request token URL would be "https://api.etrade.com/oauth/request_token".

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set consumerKey "ETRADE_CONSUMER_KEY"
set consumerSecret "ETRADE_CONSUMER_SECRET"

# Note: This example uses the sandbox request token URL.
# The live Get Request Token Request URL is:
# https://api.etrade.com/oauth/request_token
# This example will use the Sandbox Token Request URL:
set requestTokenUrl "https://apisb.etrade.com/oauth/request_token"

set http [new_CkHttp]

set success 1

CkHttp_put_OAuth1 $http 1
CkHttp_put_OAuthConsumerKey $http $consumerKey
CkHttp_put_OAuthConsumerSecret $http $consumerSecret
CkHttp_put_OAuthCallback $http "oob"

# resp is a CkHttpResponse
set resp [CkHttp_QuickGetObj $http $requestTokenUrl]
if {[CkHttp_get_LastMethodSuccess $http] != 1} then {
    puts [CkHttp_lastErrorText $http]
    delete_CkHttp $http
    exit
}

# If successful, the resp.BodyStr contains something like this:  
# oauth_token=-Wa_KwAAAAAAxfEPAAABV8Qar4Q&oauth_token_secret=OfHY4tZBX2HK4f7yIw76WYdvnl99MVGB&oauth_callback_confirmed=true
puts [CkHttpResponse_bodyStr $resp]

set hashTab [new_CkHashtable]

CkHashtable_AddQueryParams $hashTab [CkHttpResponse_bodyStr $resp]

set requestToken [CkHashtable_lookupStr $hashTab "oauth_token"]
set requestTokenSecret [CkHashtable_lookupStr $hashTab "oauth_token_secret"]
CkHttp_put_OAuthTokenSecret $http $requestTokenSecret

delete_CkHttpResponse $resp

puts "oauth_token = $requestToken"
puts "oauth_token_secret = $requestTokenSecret"

# Save this request token for the next step..
set json [new_CkJsonObject]

CkJsonObject_AppendString $json "oauth_token" $requestToken
CkJsonObject_AppendString $json "oauth_token_secret" $requestTokenSecret

set fac [new_CkFileAccess]

CkFileAccess_WriteEntireTextFile $fac "qa_data/tokens/etrade_request_token.json" [CkJsonObject_emit $json] "utf-8" 0

# ---------------------------------------------------------------------------

# The next step is to form a URL to send to the authorizeUrl
# This is an HTTP GET that we load into a popup browser.
set authorizeUrl "https://us.etrade.com/e/t/etws/authorize"

set sbUrlForBrowser [new_CkStringBuilder]

CkStringBuilder_Append $sbUrlForBrowser $authorizeUrl
CkStringBuilder_Append $sbUrlForBrowser "?key="
CkStringBuilder_Append $sbUrlForBrowser $consumerKey
CkStringBuilder_Append $sbUrlForBrowser "&token="
CkStringBuilder_Append $sbUrlForBrowser $requestToken
set url [CkStringBuilder_getAsString $sbUrlForBrowser]

# At this point, your application should load the URL in a browser.
# For example, 
# in C#: System.Diagnostics.Process.Start(url);
# in Java: Desktop.getDesktop().browse(new URI(url));
# in VBScript: Set wsh=WScript.CreateObject("WScript.Shell")
#              wsh.Run url
# in Xojo: ShowURL(url)  (see http://docs.xojo.com/index.php/ShowURL)
# in Dataflex: Runprogram Background "c:\Program Files\Internet Explorer\iexplore.exe" sUrl        
# The Microsoft account owner would interactively accept or deny the authorization request.

# Add the code to load the url in a web browser here...
# Add the code to load the url in a web browser here...
# Add the code to load the url in a web browser here...

# The ETrade account owner will login and grant access to the application.
# A short verifier code will be displayed (as shown below), and this must be copy-and-pasted
# into the next step to Complete the 3-legged OAuth1 Authorization 

# Note: The browser will NOT automatically direct you to the next page.
# You should copy the verifier code, close the browser, and then paste the verifier
# code into your application.

# 

delete_CkHttp $http
delete_CkHashtable $hashTab
delete_CkJsonObject $json
delete_CkFileAccess $fac
delete_CkStringBuilder $sbUrlForBrowser