(Tcl) Rabobank Refresh OAuth2 Access Token

Demonstrates how to refresh an expired Rabobank OAuth2 access token. (No interactive user interaction is required to refresh an access token.)

Note: This example requires Chilkat v11.0.0 or greater.

For more information, see https://developer.rabobank.nl/implementoauth2

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

set success 0

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# We previously obtained an access token and saved the JSON to a file using this example:
# Get Rabobank OAuth2 Access Token

set json [new_CkJsonObject]

set success [CkJsonObject_LoadFile $json "qa_data/tokens/rabobank.json"]
if {$success != 1} then {
    delete_CkJsonObject $json
    exit
}

# {
#   "token_type": "Bearer",
#   "access_token": "AAIkYTU0ZWM ... sxE0KL0HHWw",
#   "expires_in": 3600,
#   "consented_on": 1584641121,
#   "scope": "ais.balances.read ais.transactions.read-90days ais.transactions.read-history",
#   "refresh_token": "AAJXXSdN ... Uiblz9ILkxNBlytRGA",
#   "refresh_token_expires_in": 157784760,
#   "expires_on": "1584644722"
# }

# Refresh the access token by sending a POST like this:
# 

# POST /oauth2/token
# Headers:
#     Content-Type: application/x-www-form-urlencoded
#     Authorization: Basic BASE64(CLIENT_ID + ":" + CLIENT_SECRET)
# 
# Body (x-www-form-urlencoded):
#     grant_type: refresh_token
#     refresh_token: REFRESH_TOKEN

set req [new_CkHttpRequest]

CkHttpRequest_AddParam $req "grant_type" "refresh_token"
CkHttpRequest_AddParam $req "refresh_token" [CkJsonObject_stringOf $json "refresh_token"]

set http [new_CkHttp]

# Causes the "Authorization: Basic BASE64(CLIENT_ID + ":" + CLIENT_SECRET)" header to be added..
CkHttp_put_BasicAuth $http 1
CkHttp_put_Login $http "YOUR_APP_CLIENT_ID"
CkHttp_put_Password $http "YOUR_APP_CLIENT_SECRET"

CkHttpRequest_put_HttpVerb $req "POST"
CkHttpRequest_put_ContentType $req "application/x-www-form-urlencoded"

set resp [new_CkHttpResponse]

set success [CkHttp_HttpReq $http "https://api-sandbox.rabobank.nl/openapi/sandbox/oauth2/token" $req $resp]
if {$success == 0} then {
    puts [CkHttp_lastErrorText $http]
    delete_CkJsonObject $json
    delete_CkHttpRequest $req
    delete_CkHttp $http
    delete_CkHttpResponse $resp
    exit
}

# Load the JSON response.
CkJsonObject_Load $json [CkHttpResponse_bodyStr $resp]
CkJsonObject_put_EmitCompact $json 0

# Show the JSON response.
puts [CkJsonObject_emit $json]

puts "Response status code: [CkHttpResponse_get_StatusCode $resp]"

# If the response status code is not 200, then it's an error.
if {[CkHttpResponse_get_StatusCode $resp] != 200} then {
    delete_CkJsonObject $json
    delete_CkHttpRequest $req
    delete_CkHttp $http
    delete_CkHttpResponse $resp
    exit
}

# Save the refreshed access token JSON to a file for future requests.
set fac [new_CkFileAccess]

CkFileAccess_WriteEntireTextFile $fac "qa_data/tokens/rabobank.json" [CkJsonObject_emit $json] "utf-8" 0

delete_CkJsonObject $json
delete_CkHttpRequest $req
delete_CkHttp $http
delete_CkHttpResponse $resp
delete_CkFileAccess $fac