Xbase++ Requires Chilkat v11.0.0+
Xbase++
ING Open Banking OAuth2 Client Credentials
See more OAuth2 Examples
Demonstrates how to get an access token for the ING Open Banking APIs using client credentials.Chilkat Xbase++ Downloads
LOCAL nSuccess
LOCAL oCert
LOCAL oBdPrivKey
LOCAL oPrivKey
LOCAL oHttp
LOCAL oCrypt
LOCAL cPayload
LOCAL cPayloadDigest
LOCAL oDt
LOCAL cHttpMethod
LOCAL cReqPath
LOCAL oSbStringToSign
LOCAL oSigningPrivKey
LOCAL oRsa
LOCAL cB64Signature
LOCAL oSbAuthHdrVal
LOCAL oSbDigestHdrVal
LOCAL oReq
LOCAL oResp
LOCAL oJson
LOCAL cKty
LOCAL n
LOCAL e
LOCAL cUse
LOCAL cAlg
LOCAL cX5t
LOCAL cAccess_token
LOCAL nExpires_in
LOCAL cScope
LOCAL cToken_type
LOCAL cClient_id
LOCAL i
LOCAL nCount_i
nSuccess := 0
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.
oCert := CreateObject("Chilkat.Cert")
nSuccess := oCert:LoadFromFile("qa_data/certs_and_keys/ING/example_client_tls.cer")
IF (nSuccess == 0)
? oCert:LastErrorText
oCert:destroy()
RETURN
ENDIF
oBdPrivKey := CreateObject("Chilkat.BinData")
nSuccess := oBdPrivKey:LoadFile("qa_data/certs_and_keys/ING/example_client_tls.key")
IF (nSuccess == 0)
? "Failed to load example_client_tls.key"
oCert:destroy()
oBdPrivKey:destroy()
RETURN
ENDIF
// The OAuth 2.0 client_id for these certificates is e77d776b-90af-4684-bebc-521e5b2614dd.
// Please note down this client_id since you will need it in the next steps to call the API.
oPrivKey := CreateObject("Chilkat.PrivateKey")
nSuccess := oPrivKey:LoadAnyFormat(oBdPrivKey, "")
IF (nSuccess == 0)
? oPrivKey:LastErrorText
oCert:destroy()
oBdPrivKey:destroy()
oPrivKey:destroy()
RETURN
ENDIF
// Associate the private key with the certificate.
nSuccess := oCert:SetPrivateKey(oPrivKey)
IF (nSuccess == 0)
? oCert:LastErrorText
oCert:destroy()
oBdPrivKey:destroy()
oPrivKey:destroy()
RETURN
ENDIF
oHttp := CreateObject("Chilkat.Http")
nSuccess := oHttp:SetSslClientCert(oCert)
IF (nSuccess == 0)
? oHttp:LastErrorText
oCert:destroy()
oBdPrivKey:destroy()
oPrivKey:destroy()
oHttp:destroy()
RETURN
ENDIF
// Calculate the Digest and add the "Digest" header. Do the equivalent of this:
// payload="grant_type=client_credentials"
// payloadDigest=`echo -n "$payload" | openssl dgst -binary -sha256 | openssl base64`
// digest=SHA-256=$payloadDigest
oCrypt := CreateObject("Chilkat.Crypt2")
oCrypt:HashAlgorithm := "SHA256"
oCrypt:EncodingMode := "base64"
cPayload := "grant_type=client_credentials"
cPayloadDigest := oCrypt:HashStringENC(cPayload)
// Calculate the current date/time and add the Date header.
// reqDate=$(LC_TIME=en_US.UTF-8 date -u "+%a, %d %b %Y %H:%M:%S GMT")
oDt := CreateObject("Chilkat.CkDateTime")
oDt:SetFromCurrentSystemTime()
// The desire date/time format is the "RFC822" format.
oHttp:SetRequestHeader("Date", oDt:GetAsRfc822(0))
// Calculate signature for signing your request
// Duplicate the following code:
// httpMethod="post"
// reqPath="/oauth2/token"
// signingString="(request-target): $httpMethod $reqPath
// date: $reqDate
// digest: $digest"
// signature=`printf "$signingString" | openssl dgst -sha256 -sign "${certPath}example_client_signing.key" -passin "pass:changeit" | openssl base64 -A`
cHttpMethod := "POST"
cReqPath := "/oauth2/token"
oSbStringToSign := CreateObject("Chilkat.StringBuilder")
oSbStringToSign:Append("(request-target): ")
oSbStringToSign:Append(cHttpMethod)
oSbStringToSign:ToLowercase()
oSbStringToSign:Append(" ")
oSbStringToSign:AppendLine(cReqPath, 0)
oSbStringToSign:Append("date: ")
oSbStringToSign:AppendLine(oDt:GetAsRfc822(0), 0)
oSbStringToSign:Append("digest: SHA-256=")
oSbStringToSign:Append(cPayloadDigest)
oSigningPrivKey := CreateObject("Chilkat.PrivateKey")
nSuccess := oSigningPrivKey:LoadPemFile("qa_data/certs_and_keys/ING/example_client_signing.key")
IF (nSuccess == 0)
? oSigningPrivKey:LastErrorText
oCert:destroy()
oBdPrivKey:destroy()
oPrivKey:destroy()
oHttp:destroy()
oCrypt:destroy()
oDt:destroy()
oSbStringToSign:destroy()
oSigningPrivKey:destroy()
RETURN
ENDIF
oRsa := CreateObject("Chilkat.Rsa")
nSuccess := oRsa:UsePrivateKey(oSigningPrivKey)
IF (nSuccess == 0)
? oRsa:LastErrorText
oCert:destroy()
oBdPrivKey:destroy()
oPrivKey:destroy()
oHttp:destroy()
oCrypt:destroy()
oDt:destroy()
oSbStringToSign:destroy()
oSigningPrivKey:destroy()
oRsa:destroy()
RETURN
ENDIF
oRsa:EncodingMode := "base64"
cB64Signature := oRsa:SignStringENC(oSbStringToSign:GetAsString(), "SHA256")
oSbAuthHdrVal := CreateObject("Chilkat.StringBuilder")
oSbAuthHdrVal:Append('Signature keyId="e77d776b-90af-4684-bebc-521e5b2614dd",')
oSbAuthHdrVal:Append('algorithm="rsa-sha256",')
oSbAuthHdrVal:Append('headers="(request-target) date digest",')
oSbAuthHdrVal:Append('signature="')
oSbAuthHdrVal:Append(cB64Signature)
oSbAuthHdrVal:Append('"')
oSbDigestHdrVal := CreateObject("Chilkat.StringBuilder")
oSbDigestHdrVal:Append("SHA-256=")
oSbDigestHdrVal:Append(cPayloadDigest)
// Do the following CURL statement:
// curl -i -X POST "${httpHost}${reqPath}" \
// -H 'Accept: application/json' \
// -H 'Content-Type: application/x-www-form-urlencoded' \
// -H "Digest: ${digest}" \
// -H "Date: ${reqDate}" \
// -H "authorization: Signature keyId=\"$keyId\",algorithm=\"rsa-sha256\",headers=\"(request-target) date digest\",signature=\"$signature\"" \
// -d "${payload}" \
// --cert "${certPath}tlsCert.crt" \
// --key "${certPath}tlsCert.key"
oReq := CreateObject("Chilkat.HttpRequest")
oReq:AddParam("grant_type", "client_credentials")
oReq:AddHeader("Accept", "application/json")
oReq:AddHeader("Date", oDt:GetAsRfc822(0))
oReq:AddHeader("Digest", oSbDigestHdrVal:GetAsString())
oReq:AddHeader("Authorization", oSbAuthHdrVal:GetAsString())
oReq:HttpVerb := "POST"
oReq:ContentType := "application/x-www-form-urlencoded"
oResp := CreateObject("Chilkat.HttpResponse")
nSuccess := oHttp:HttpReq("https://api.sandbox.ing.com/oauth2/token", oReq, oResp)
IF (nSuccess == 0)
? oHttp:LastErrorText
oCert:destroy()
oBdPrivKey:destroy()
oPrivKey:destroy()
oHttp:destroy()
oCrypt:destroy()
oDt:destroy()
oSbStringToSign:destroy()
oSigningPrivKey:destroy()
oRsa:destroy()
oSbAuthHdrVal:destroy()
oSbDigestHdrVal:destroy()
oReq:destroy()
oResp:destroy()
RETURN
ENDIF
// If successful, the status code = 200
? "Response Status Code: " + Str(oResp:StatusCode)
? oResp:BodyStr
oJson := CreateObject("Chilkat.JsonObject")
oJson:Load(oResp:BodyStr)
oJson:EmitCompact := 0
? oJson:Emit()
// A successful response contains an access token such as:
// {
// "access_token": "eyJhbGc ... bxI_SoPOBH9xmoM",
// "expires_in": 905,
// "scope": "payment-requests:view payment-requests:create payment-requests:close greetings:view virtual-ledger-accounts:fund-reservation:create virtual-ledger-accounts:fund-reservation:delete virtual-ledger-accounts:balance:view",
// "token_type": "Bearer",
// "keys": [
// {
// "kty": "RSA",
// "n": "3l3rdz4...04VPkdV",
// "e": "AQAB",
// "use": "sig",
// "alg": "RS256",
// "x5t": "3c396700fc8cd709cf9cb5452a22bcde76985851"
// }
// ],
// "client_id": "e77d776b-90af-4684-bebc-521e5b2614dd"
// }
// Use this online tool to generate parsing code from sample JSON:
// Generate Parsing Code from JSON
cAccess_token := oJson:StringOf("access_token")
nExpires_in := oJson:IntOf("expires_in")
cScope := oJson:StringOf("scope")
cToken_type := oJson:StringOf("token_type")
cClient_id := oJson:StringOf("client_id")
i := 0
nCount_i := oJson:SizeOfArray("keys")
DO WHILE i < nCount_i
oJson:I := i
cKty := oJson:StringOf("keys[i].kty")
n := oJson:StringOf("keys[i].n")
e := oJson:StringOf("keys[i].e")
cUse := oJson:StringOf("keys[i].use")
cAlg := oJson:StringOf("keys[i].alg")
cX5t := oJson:StringOf("keys[i].x5t")
i := i + 1
ENDDO
// This example will save the JSON containing the access key to a file so that
// a subsequent example can load it and then use the access key for a request, such as to create a payment request.
oJson:WriteFile("qa_data/tokens/ing_access_token.json")
oCert:destroy()
oBdPrivKey:destroy()
oPrivKey:destroy()
oHttp:destroy()
oCrypt:destroy()
oDt:destroy()
oSbStringToSign:destroy()
oSigningPrivKey:destroy()
oRsa:destroy()
oSbAuthHdrVal:destroy()
oSbDigestHdrVal:destroy()
oReq:destroy()
oResp:destroy()
oJson:destroy()