(Tcl) Isabel Connect Create First Access Token and Refresh Token

See more Ibanity Examples

Creates your first access token and refresh token. Once created, the refresh token can be used to get a new access token after it expires, or before it expires.

For more information, see https://documentation.ibanity.com/isabel-connect/api#create-refresh-token

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set http [new_CkHttp]

# Implements the following CURL command:

# curl -X POST https://api.ibanity.com/isabel-connect/oauth2/token \
# --cert certificate.pem:qwertyuiop1 \
# --key private_key.pem  \
# -H "Content-Type: application/x-www-form-urlencoded" \
# -H "Accept: application/vnd.api+json" \
# -H "Ibanity-Idempotency-Key: af621a8f-f74b-41a2-b011-336997633df4"  \
# -d grant_type=authorization_code \
# -d code=valid_authorization_code \
# -d client_id=valid_client_id \
# -d client_secret=valid_client_secret \
# -d redirect_uri=https://fake-tpp.com 

# Ibanity provides the certificate + private key in PFX format.  This example will use the .pfx instead of the pair of PEM files.
# (It is also possible to implement using Chilkat with the PEM files, but PFX is easier.)
set cert [new_CkCert]

set success [CkCert_LoadPfxFile $cert "qa_data/pfx/my_ibanity_certificate.pfx" "my_pfx_password"]
if {$success == 0} then {
    puts [CkCert_lastErrorText $cert]
    delete_CkHttp $http
    delete_CkCert $cert
    exit
}

set success [CkHttp_SetSslClientCert $http $cert]
if {$success == 0} then {
    puts [CkHttp_lastErrorText $http]
    delete_CkHttp $http
    delete_CkCert $cert
    exit
}

set req [new_CkHttpRequest]

CkHttpRequest_put_HttpVerb $req "POST"
CkHttpRequest_put_Path $req "/isabel-connect/oauth2/token"
CkHttpRequest_put_ContentType $req "application/x-www-form-urlencoded"
CkHttpRequest_AddParam $req "grant_type" "authorization_code"

# Note: For sandbox testing, we literally want to use the strings
# "valid_authorization_code", "valid_client_id", and "valid_client_secret".
# For the live app, you would replace these with actual values.
CkHttpRequest_AddParam $req "code" "valid_authorization_code"
CkHttpRequest_AddParam $req "client_id" "valid_client_id"
CkHttpRequest_AddParam $req "client_secret" "valid_client_secret"
CkHttpRequest_AddParam $req "redirect_uri" "https://fake-tpp.com"

CkHttpRequest_AddHeader $req "Accept" "application/vnd.api+json"

set crypt [new_CkCrypt2]

set idempotencyKey [CkCrypt2_generateUuid $crypt]
puts "Ibanity-Idempotency-Key: $idempotencyKey"
CkHttpRequest_AddHeader $req "Ibanity-Idempotency-Key" $idempotencyKey

# resp is a CkHttpResponse
set resp [CkHttp_PostUrlEncoded $http "https://api.ibanity.com/isabel-connect/oauth2/token" $req]
if {[CkHttp_get_LastMethodSuccess $http] == 0} then {
    puts [CkHttp_lastErrorText $http]
    delete_CkHttp $http
    delete_CkCert $cert
    delete_CkHttpRequest $req
    delete_CkCrypt2 $crypt
    exit
}

set sbResponseBody [new_CkStringBuilder]

CkHttpResponse_GetBodySb $resp $sbResponseBody
set jResp [new_CkJsonObject]

CkJsonObject_LoadSb $jResp $sbResponseBody
CkJsonObject_put_EmitCompact $jResp 0

puts "Response Body:"
puts [CkJsonObject_emit $jResp]

set respStatusCode [CkHttpResponse_get_StatusCode $resp]
puts "Response Status Code = $respStatusCode"
if {$respStatusCode >= 400} then {
    puts "Response Header:"
    puts [CkHttpResponse_header $resp]
    puts "Failed."
    delete_CkHttpResponse $resp

    delete_CkHttp $http
    delete_CkCert $cert
    delete_CkHttpRequest $req
    delete_CkCrypt2 $crypt
    delete_CkStringBuilder $sbResponseBody
    delete_CkJsonObject $jResp
    exit
}

delete_CkHttpResponse $resp

# Sample JSON response:
# (Sample code for parsing the JSON response is shown below)

# {
#   "token_type": "Bearer",
#   "scope": "cloudconnect",
#   "refresh_token": "valid_refresh_token",
#   "expires_in": 1799,
#   "access_token": "access_token_1617371230"
# }

# Sample code for parsing the JSON response...
# Use the following online tool to generate parsing code from sample JSON:
# Generate Parsing Code from JSON

set token_type [CkJsonObject_stringOf $jResp "token_type"]
set scope [CkJsonObject_stringOf $jResp "scope"]
set refresh_token [CkJsonObject_stringOf $jResp "refresh_token"]
set expires_in [CkJsonObject_IntOf $jResp "expires_in"]
set access_token [CkJsonObject_stringOf $jResp "access_token"]

# Save to a file for future use in refreshing the access token.
# The refresh token is the same each time we refresh to get a new access token.
set success [CkJsonObject_WriteFile $jResp "qa_data/tokens/isabel_refresh_token.json"]

# Also save to a file to be used as the current access token.
set success [CkJsonObject_WriteFile $jResp "qa_data/tokens/isabel_access_token.json"]

delete_CkHttp $http
delete_CkCert $cert
delete_CkHttpRequest $req
delete_CkCrypt2 $crypt
delete_CkStringBuilder $sbResponseBody
delete_CkJsonObject $jResp