(Unicode C) QuickBooks - Automatically Refresh Access Token with No User Interaction

Demonstrates how to automaticaly refresh an expired access token and retry the request after a 401 authorization error.

Chilkat C/C++ Library Downloads
MS Visual C/C++ Linux/CentOS C/C++ Alpine Linux C/C++ MAC OS X C/C++	armhf/aarch64 C/C++ C++ Builder iOS C/C++ Android C/C++	Solaris C/C++ MinGW C/C++

#include <C_CkJsonObjectW.h>
#include <C_CkRestW.h>
#include <C_CkStringBuilderW.h>
#include <C_CkOAuth2W.h>
#include <C_CkDateTimeW.h>
#include <C_CkDtObjW.h>

void ChilkatSample(void)
    {
    HCkJsonObjectW jsonToken;
    BOOL success;
    HCkRestW rest;
    BOOL bAutoReconnect;
    HCkStringBuilderW sbAuth;
    const wchar_t *responseBody;
    HCkOAuth2W oauth2;
    HCkStringBuilderW sbJson;
    HCkJsonObjectW json;
    HCkDateTimeW dtime;
    BOOL bLocalTime;
    HCkDtObjW dt;

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Get our previously obtained OAuth2 access token, which should contain JSON like this:
    // {
    //   "expires_in": 3600,
    //   "x_refresh_token_expires_in": 8726400,
    //   "refresh_token": "L011546037639r ... 3vR2DrbOmg0Sdagw",
    //   "access_token": "eyJlbmMiOiJBMTI4Q0 ... oETJEMbeggg",
    //   "token_type": "bearer"
    // }

    jsonToken = CkJsonObjectW_Create();
    success = CkJsonObjectW_LoadFile(jsonToken,L"qa_data/tokens/qb-access-token.json");

    rest = CkRestW_Create();

    // Connect using TLS.
    // A single REST object, once connected, can be used for many Quickbooks REST API calls.
    // The auto-reconnect indicates that if the already-established HTTPS connection is closed,
    // then it will be automatically re-established as needed.
    bAutoReconnect = TRUE;
    success = CkRestW_Connect(rest,L"sandbox-quickbooks.api.intuit.com",443,TRUE,bAutoReconnect);
    if (success != TRUE) {
        wprintf(L"%s\n",CkRestW_lastErrorText(rest));
        CkJsonObjectW_Dispose(jsonToken);
        CkRestW_Dispose(rest);
        return;
    }

    sbAuth = CkStringBuilderW_Create();
    CkStringBuilderW_Append(sbAuth,L"Bearer ");
    CkStringBuilderW_Append(sbAuth,CkJsonObjectW_stringOf(jsonToken,L"access_token"));
    CkRestW_putAuthorization(rest,CkStringBuilderW_getAsString(sbAuth));

    CkRestW_AddHeader(rest,L"Accept",L"application/json");
    CkRestW_putAllowHeaderFolding(rest,FALSE);

    // The company ID is 123146096291789
    // The employee ID is 58
    responseBody = CkRestW_fullRequestNoBody(rest,L"GET",L"/v3/company/123146096291789/employee/58?minorversion=45");
    if (CkRestW_getLastMethodSuccess(rest) != TRUE) {
        wprintf(L"%s\n",CkRestW_lastErrorText(rest));
        CkJsonObjectW_Dispose(jsonToken);
        CkRestW_Dispose(rest);
        CkStringBuilderW_Dispose(sbAuth);
        return;
    }

    // If we get a 401 authorization error, then it's likely because the access token expired.
    // We can automatically refresh it without interaction from the user.
    if (CkRestW_getResponseStatusCode(rest) == 401) {

        oauth2 = CkOAuth2W_Create();

        CkOAuth2W_putTokenEndpoint(oauth2,L"https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer");

        // Replace these with actual values.
        CkOAuth2W_putClientId(oauth2,L"QUICKBOOKS-CLIENT-ID");
        CkOAuth2W_putClientSecret(oauth2,L"QUICKBOOKS-CLIENT-SECRET");

        // Get the "refresh_token"
        CkOAuth2W_putRefreshToken(oauth2,CkJsonObjectW_stringOf(jsonToken,L"refresh_token"));

        // Send the HTTP POST to refresh the access token..
        success = CkOAuth2W_RefreshAccessToken(oauth2);
        if (success != TRUE) {
            wprintf(L"%s\n",CkOAuth2W_lastErrorText(oauth2));
            CkJsonObjectW_Dispose(jsonToken);
            CkRestW_Dispose(rest);
            CkStringBuilderW_Dispose(sbAuth);
            CkOAuth2W_Dispose(oauth2);
            return;
        }

        wprintf(L"New access token: %s\n",CkOAuth2W_accessToken(oauth2));

        // Update the JSON with the new tokens.
        CkJsonObjectW_UpdateString(jsonToken,L"access_token",CkOAuth2W_accessToken(oauth2));

        // Save the new JSON access token response to a file.
        // The access + refresh tokens contained in this JSON will be needed for the next refresh.
        sbJson = CkStringBuilderW_Create();
        CkJsonObjectW_putEmitCompact(jsonToken,FALSE);
        CkJsonObjectW_EmitSb(jsonToken,sbJson);
        CkStringBuilderW_WriteFile(sbJson,L"qa_data/tokens/qb-access-token.json",L"utf-8",FALSE);

        wprintf(L"OAuth2 token refreshed!\n");
        wprintf(L"New Access Token = %s\n",CkOAuth2W_accessToken(oauth2));

        CkStringBuilderW_Clear(sbAuth);
        CkStringBuilderW_Append(sbAuth,L"Bearer ");
        CkStringBuilderW_Append(sbAuth,CkOAuth2W_accessToken(oauth2));
        CkRestW_putAuthorization(rest,CkStringBuilderW_getAsString(sbAuth));

        // Now retry the request with the refreshed access token...
        responseBody = CkRestW_fullRequestNoBody(rest,L"GET",L"/v3/company/123146096291789/employee/58?minorversion=45");
        if (CkRestW_getLastMethodSuccess(rest) != TRUE) {
            wprintf(L"%s\n",CkRestW_lastErrorText(rest));
            CkJsonObjectW_Dispose(jsonToken);
            CkRestW_Dispose(rest);
            CkStringBuilderW_Dispose(sbAuth);
            CkOAuth2W_Dispose(oauth2);
            CkStringBuilderW_Dispose(sbJson);
            return;
        }

    }

    // We should expect a 200 response if successful.
    if (CkRestW_getResponseStatusCode(rest) != 200) {
        wprintf(L"Request Header: \n");
        wprintf(L"%s\n",CkRestW_lastRequestHeader(rest));
        wprintf(L"----\n");
        wprintf(L"Response StatusCode = %d\n",CkRestW_getResponseStatusCode(rest));
        wprintf(L"Response StatusLine: %s\n",CkRestW_responseStatusText(rest));
        wprintf(L"Response Header:\n");
        wprintf(L"%s\n",CkRestW_responseHeader(rest));
        wprintf(L"%s\n",responseBody);
        CkJsonObjectW_Dispose(jsonToken);
        CkRestW_Dispose(rest);
        CkStringBuilderW_Dispose(sbAuth);
        CkOAuth2W_Dispose(oauth2);
        CkStringBuilderW_Dispose(sbJson);
        return;
    }

    // Load the JSON response into a JSON object for parsing.
    // A sample JSON response is shown below.
    json = CkJsonObjectW_Create();
    CkJsonObjectW_Load(json,responseBody);

    // These will be used for parsing date/time strings..
    dtime = CkDateTimeW_Create();
    bLocalTime = TRUE;

    // Show the JSON.   
    CkJsonObjectW_putEmitCompact(json,FALSE);
    wprintf(L"%s\n",CkJsonObjectW_emit(json));

    // Get some information from the JSON..
    wprintf(L"Name: %s\n",CkJsonObjectW_stringOf(json,L"Employee.DisplayName"));
    wprintf(L"Id: %s\n",CkJsonObjectW_stringOf(json,L"Employee.Id"));
    wprintf(L"City: %s\n",CkJsonObjectW_stringOf(json,L"Employee.PrimaryAddr.City"));
    wprintf(L"PostalCode: %s\n",CkJsonObjectW_stringOf(json,L"Employee.PrimaryAddr.PostalCode"));

    // Load the CreateTime into a CkDateTime...
    CkDateTimeW_SetFromTimestamp(dtime,CkJsonObjectW_stringOf(json,L"Employee.MetaData.CreateTime"));
    dt = CkDateTimeW_GetDtObj(dtime,bLocalTime);
    wprintf(L"%d/%d/%d  %d:%d\n",CkDtObjW_getMonth(dt),CkDtObjW_getDay(dt),CkDtObjW_getYear(dt),CkDtObjW_getHour(dt),CkDtObjW_getMinute(dt));
    CkDtObjW_Dispose(dt);

    wprintf(L"Success.\n");

    // Use this online tool to generate parsing code from sample JSON: 
    // Generate Parsing Code from JSON

    // ------------------------------------------------------
    // The JSON response looks like this:

    // {
    //   "Employee": {
    //     "SSN": "XXX-XX-XXXX",
    //     "PrimaryAddr": {
    //       "Id": "116",
    //       "Line1": "45 N. Elm Street",
    //       "City": "Middlefield",
    //       "CountrySubDivisionCode": "CA",
    //       "PostalCode": "93242"
    //     },
    //     "BillableTime": false,
    //     "domain": "QBO",
    //     "sparse": false,
    //     "Id": "98",
    //     "SyncToken": "0",
    //     "MetaData": {
    //       "CreateTime": "2015-07-24T09:34:35-07:00",
    //       "LastUpdatedTime": "2015-07-24T09:34:35-07:00"
    //     },
    //     "GivenName": "Bill",
    //     "FamilyName": "Miller",
    //     "DisplayName": "Bill Miller",
    //     "PrintOnCheckName": "Bill Miller",
    //     "Active": true,
    //     "PrimaryPhone": {
    //       "FreeFormNumber": "234-525-1234"
    //     }
    //   },
    //   "time": "2015-07-24T09:35:54.805-07:00"
    // 


    CkJsonObjectW_Dispose(jsonToken);
    CkRestW_Dispose(rest);
    CkStringBuilderW_Dispose(sbAuth);
    CkOAuth2W_Dispose(oauth2);
    CkStringBuilderW_Dispose(sbJson);
    CkJsonObjectW_Dispose(json);
    CkDateTimeW_Dispose(dtime);

    }