Xojo Plugin

ETrade OAuth1 Authorization (3-legged) Step 2

See more ETrade Examples

Demonstrates the final step in 3-legged OAuth1 authorization for the ETrade REST API. Example uses the OAuth1 verifier code that was copy-and-pasted from the browser in the 1st step. The end result of this final OAuth1 step is an access token that can be used to make ETrade REST API calls.

See https://apisb.etrade.com/docs/api/authorization/get_access_token.html

Xojo Plugin

Dim success As Boolean
success = False

// This requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

Dim consumerKey As String
consumerKey = "ETRADE_CONSUMER_KEY"
Dim consumerSecret As String
consumerSecret = "ETRADE_CONSUMER_SECRET"

Dim requestTokenUrl As String
requestTokenUrl = "https://apisb.etrade.com/oauth/request_token"
Dim authorizeUrl As String
authorizeUrl = "https://us.etrade.com/e/t/etws/authorize"
Dim accessTokenUrl As String
accessTokenUrl = "https://apisb.etrade.com/oauth/access_token"

Dim http As New Chilkat.Http
success = True

http.OAuth1 = True
http.OAuthConsumerKey = consumerKey
http.OAuthConsumerSecret = consumerSecret
http.OAuthCallback = "oob"

Dim jsonRequestToken As New Chilkat.JsonObject
success = jsonRequestToken.LoadFile("qa_data/tokens/etrade_request_token.json")
Dim requestToken As String
requestToken = jsonRequestToken.StringOf("oauth_token")
Dim requestTokenSecret As String
requestTokenSecret = jsonRequestToken.StringOf("oauth_token_secret")

// ------------------------------------------------------------------------------
// Exchange the OAuth Request Token for an OAuth Access Token.

http.OAuthToken = requestToken
http.OAuthTokenSecret = requestTokenSecret

// This is the verifier that was interactively copy-and-pasted from the browser back to our app.
http.OAuthVerifier = "NJ07S"

// Use the explicit string "INCLUDE_OAUTH_TOKEN" to tell Chilkat to include the "oauth_token" param in the Authorization header field
http.UncommonOptions = "INCLUDE_OAUTH_TOKEN"

Dim resp As New Chilkat.HttpResponse
success = http.HttpNoBody("GET",accessTokenUrl,resp)
If (success = False) Then
    System.DebugLog(http.LastErrorText)
    Return
End If

// Make sure a successful response was received.
If (resp.StatusCode <> 200) Then
    System.DebugLog(resp.StatusLine)
    System.DebugLog(resp.Header)
    System.DebugLog(resp.BodyStr)
    Return
End If

// If successful, the resp.BodyStr contains something like this:
// oauth_token=85123455-fF41296Bi3daM8eCo9Y5vZabcdxXpRv864plYPOjr&oauth_token_secret=afiYJOgabcdSfGae7BDvJVVTwys8fUGpra5guZxbmFBZo
System.DebugLog(resp.BodyStr)

Dim hashTab As New Chilkat.Hashtable
success = hashTab.AddQueryParams(resp.BodyStr)

Dim accessToken As String
accessToken = hashTab.LookupStr("oauth_token")
Dim accessTokenSecret As String
accessTokenSecret = hashTab.LookupStr("oauth_token_secret")

// The access token + secret is what should be saved and used for
// subsequent REST API calls.
System.DebugLog("Access Token = " + accessToken)
System.DebugLog("Access Token Secret = " + accessTokenSecret)

// Save this access token for future calls.
// Just in case we need user_id and screen_name, save those also..
Dim json As New Chilkat.JsonObject
success = json.AppendString("oauth_token",accessToken)
success = json.AppendString("oauth_token_secret",accessTokenSecret)

Dim fac As New Chilkat.FileAccess
success = fac.WriteEntireTextFile("qa_data/tokens/etrade.json",json.Emit(),"utf-8",False)

System.DebugLog("Success.")