Tcl

Refresh Wish for Merchants OAuth2 Access Token

See more OAuth2 Examples

Demonstrates how to refresh a Wish OAuth2 access token.

Note: This example requires Chilkat v9.5.0.85.

Tcl

load ./chilkat.dll

set success 0

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# See Get Wish OAuth2 Access Token 
# for sample code showing how to obtain a Wish access token for desktop apps.

# This example assumes we previously obtained an OAuth2 access token for Wish.

set jsonToken [new_CkJsonObject]

set success [CkJsonObject_LoadFile $jsonToken "qa_data/tokens/wish.json"]
if {$success != 1} then {
    puts "Failed to load wish.json"
    delete_CkJsonObject $jsonToken
    exit
}

# The access token JSON looks something like this:

# {
#   "message": "",
#   "code": 0,
#   "data": {
#     "access_token": "15af1c191c1243b029bc1660b5c08ce7",
#     "scopes": [
#       "epc:read",
#       "epc:write",
#       "fbs:read",
#       "fbs:write",
#       "fbw:read",
#       "fbw:write",
#       "infractions:read",
#       "infractions:write",
#       "insurance:read",
#       "insurance:write",
#       "loans:read",
#       "loans:write",
#       "merchant:read",
#       "merchant:write",
#       "notifications:read",
#       "notifications:write",
#       "orders:read",
#       "orders:write",
#       "payments:read",
#       "payments:write",
#       "penalties:read",
#       "penalties:write",
#       "product_boost:read",
#       "product_boost:write",
#       "products:read",
#       "products:write",
#       "ratings:read",
#       "ratings:write",
#       "returns:read",
#       "returns:write",
#       "tickets:read",
#       "tickets:write"
#     ],
#     "merchant_id": "5eb3f605178f5be2c784fa02",
#     "expiry_time": "2020-12-17T16:55:09.594+00:00",
#     "refresh_token": "55a38e44df674a1e859891624b2c4c23"
#   }
# }

set oauth2 [new_CkOAuth2]

# Note: In most OAuth2 implementations, the token endpoint is the same for both the
# refresh request and the exchange-code-for-token request (which happens when getting
# the OAuth2 token for the 1st time).   Wish uses a different URL for the refresh:
CkOAuth2_put_TokenEndpoint $oauth2 "https://merchant.wish.com/api/v3/oauth/refresh_token"

# The following uncommon option was added in Chilkat v9.5.0.85
CkOAuth2_put_UncommonOptions $oauth2 "EXCHANGE_CODE_FOR_TOKEN_USING_GET"

# Replace these with actual values.
CkOAuth2_put_ClientId $oauth2 "WISH-CLIENT-ID"
CkOAuth2_put_ClientSecret $oauth2 "WISH-CLIENT-SECRET"

# Get the "refresh_token"
CkOAuth2_put_RefreshToken $oauth2 [CkJsonObject_stringOf $jsonToken "data.refresh_token"]

# Send the HTTP request to refresh the access token..
set success [CkOAuth2_RefreshAccessToken $oauth2]
if {$success != 1} then {
    puts [CkOAuth2_lastErrorText $oauth2]
    delete_CkJsonObject $jsonToken
    delete_CkOAuth2 $oauth2
    exit
}

# Save the new JSON access token response to a file.
# The access + refresh tokens contained in this JSON will be needed for the next refresh.
set sbJson [new_CkStringBuilder]

CkStringBuilder_Append $sbJson [CkOAuth2_accessTokenResponse $oauth2]
CkStringBuilder_WriteFile $sbJson "qa_data/tokens/wish.json" "utf-8" 0

puts "OAuth2 token refreshed!"
puts "New Access Token = [CkOAuth2_accessToken $oauth2]"

delete_CkJsonObject $jsonToken
delete_CkOAuth2 $oauth2
delete_CkStringBuilder $sbJson