(Classic ASP) citi Developer OAuth2 Client Credentials Grant

Get access token for your application credentials. You can use this for citi APIs which do not require customer credential verification and consent (e.g. Onboarding).

Note: This example requires Chilkat v11.0.0 or greater.

For more information, see https://sandbox.developerhub.citi.com/api/united-states/retail-bank/identity-security/authorize/documentation

Chilkat ActiveX Downloads

ActiveX for 32-bit and 64-bit Windows

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<%
success = 0

' This example assumes the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

set http = Server.CreateObject("Chilkat.Http")

' Implements the following CURL command:

' curl --request POST \
'   --url https://sandbox.apihub.citi.com/gcb/api/clientCredentials/oauth2/token/us/gcb \
'   --header 'accept: application/json' \
'   --user client-id:client-secret \
'   --header 'content-type: application/x-www-form-urlencoded' \
'   --data 'grant_type=client_credentials&scope=%2Fapi'

http.Login = "client-id"
http.Password = "client-secret"

set req = Server.CreateObject("Chilkat.HttpRequest")
req.HttpVerb = "POST"
req.Path = "/gcb/api/clientCredentials/oauth2/token/us/gcb"
req.ContentType = "application/x-www-form-urlencoded"
req.AddParam "grant_type","client_credentials"
req.AddParam "scope","/api"
req.AddHeader "accept","application/json"

set resp = Server.CreateObject("Chilkat.HttpResponse")
success = http.HttpReq("https://sandbox.apihub.citi.com/gcb/api/clientCredentials/oauth2/token/us/gcb",req,resp)
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( http.LastErrorText) & "</pre>"
    Response.End
End If

set sbResponseBody = Server.CreateObject("Chilkat.StringBuilder")
success = resp.GetBodySb(sbResponseBody)
set jResp = Server.CreateObject("Chilkat.JsonObject")
success = jResp.LoadSb(sbResponseBody)
jResp.EmitCompact = 0

Response.Write "<pre>" & Server.HTMLEncode( "Response Body:") & "</pre>"
Response.Write "<pre>" & Server.HTMLEncode( jResp.Emit()) & "</pre>"

respStatusCode = resp.StatusCode
Response.Write "<pre>" & Server.HTMLEncode( "Response Status Code = " & respStatusCode) & "</pre>"
If (respStatusCode >= 400) Then
    Response.Write "<pre>" & Server.HTMLEncode( "Response Header:") & "</pre>"
    Response.Write "<pre>" & Server.HTMLEncode( resp.Header) & "</pre>"
    Response.Write "<pre>" & Server.HTMLEncode( "Failed.") & "</pre>"
    Response.End
End If

success = jResp.WriteFile("qa_data/tokens/citi_client_credentials.json")
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( "Failed to save JSON access token file.") & "</pre>"
    Response.End
End If

'  Sample JSON response:
'  (Sample code for parsing the JSON response is shown below)

'  {
'    "token_type": "bearer",
'    "access_token": "AAIkMjdh ... 3fsWb7zJ0s",
'    "expires_in": 1800,
'    "consented_on": 1584817860,
'    "scope": "/api"
'  }

'  Sample code for parsing the JSON response...
'  Use the following online tool to generate parsing code from sample JSON:
'  Generate Parsing Code from JSON

token_type = jResp.StringOf("token_type")
access_token = jResp.StringOf("access_token")
expires_in = jResp.IntOf("expires_in")
consented_on = jResp.IntOf("consented_on")
scope = jResp.StringOf("scope")

%>
</body>
</html>