(Delphi DLL) OneLogin OIDC - Get Discovery Document (OpenID Connect)

Downloads the OpenID Connect self-discovery document for a OneLogin OIDC enabled app.

For more information, see https://developers.onelogin.com/openid-connect/connect-to-onelogin

Chilkat for Delphi Downloads Chilkat non-ActiveX DLL for Delphi Chilkat ActiveX DLL for Delphi * The examples here use the non-ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Http, HttpResponse, JsonObject;

...

procedure TForm1.Button1Click(Sender: TObject);
var
http: HCkHttp;
resp: HCkHttpResponse;
jsonResponse: HCkJsonObject;
authorization_endpoint: PWideChar;
claims_parameter_supported: Boolean;
issuer: PWideChar;
jwks_uri: PWideChar;
request_parameter_supported: Boolean;
request_uri_parameter_supported: Boolean;
token_endpoint: PWideChar;
userinfo_endpoint: PWideChar;
introspection_endpoint: PWideChar;
revocation_endpoint: PWideChar;
i: Integer;
count_i: Integer;
strVal: PWideChar;

begin
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

http := CkHttp_Create();

CkHttp_putAccept(http,'application/json');

resp := CkHttp_QuickRequest(http,'GET','https://<account>.onelogin.com/oidc/.well-known/openid-configuration');
if (CkHttp_getLastMethodSuccess(http) <> True) then
  begin
    Memo1.Lines.Add(CkHttp__lastErrorText(http));
    Exit;
  end;

Memo1.Lines.Add('Response Status Code: ' + IntToStr(CkHttpResponse_getStatusCode(resp)));

jsonResponse := CkJsonObject_Create();
CkJsonObject_Load(jsonResponse,CkHttpResponse__bodyStr(resp));
CkJsonObject_putEmitCompact(jsonResponse,False);
Memo1.Lines.Add(CkJsonObject__emit(jsonResponse));

if (CkHttpResponse_getStatusCode(resp) <> 200) then
  begin
    Memo1.Lines.Add('Failed.');
    CkHttpResponse_Dispose(resp);
    Exit;
  end;

CkHttpResponse_Dispose(resp);

// Sample output...
// (See the parsing code below..)
// 
// Use the this online tool to generate parsing code from sample JSON: 
// Generate Parsing Code from JSON

// {
//   "acr_values_supported": [
//     "onelogin:nist:level:1:re-auth"
//   ],
//   "authorization_endpoint": "https://chilkat-dev.onelogin.com/oidc/auth",
//   "claims_parameter_supported": true,
//   "claims_supported": [
//     "acr",
//     "auth_time",
//     "company",
//     "custom_fields",
//     "department",
//     "email",
//     "family_name",
//     "given_name",
//     "groups",
//     "iss",
//     "locale_code",
//     "name",
//     "params",
//     "phone_number",
//     "preferred_username",
//     "sid",
//     "sub",
//     "title",
//     "updated_at"
//   ],
//   "grant_types_supported": [
//     "authorization_code",
//     "implicit",
//     "refresh_token",
//     "client_credentials",
//     "password"
//   ],
//   "id_token_signing_alg_values_supported": [
//     "RS256"
//   ],
//   "issuer": "https://openid-connect.onelogin.com/oidc",
//   "jwks_uri": "https://chilkat-dev.onelogin.com/oidc/certs",
//   "request_parameter_supported": false,
//   "request_uri_parameter_supported": false,
//   "response_modes_supported": [
//     "form_post",
//     "fragment",
//     "query"
//   ],
//   "response_types_supported": [
//     "code",
//     "id_token token",
//     "id_token"
//   ],
//   "scopes_supported": [
//     "openid",
//     "name",
//     "profile",
//     "groups",
//     "email",
//     "params",
//     "phone"
//   ],
//   "subject_types_supported": [
//     "public"
//   ],
//   "token_endpoint": "https://chilkat-dev.onelogin.com/oidc/token",
//   "token_endpoint_auth_methods_supported": [
//     "client_secret_basic",
//     "client_secret_post",
//     "none"
//   ],
//   "userinfo_endpoint": "https://chilkat-dev.onelogin.com/oidc/me",
//   "userinfo_signing_alg_values_supported": [
//   ],
//   "code_challenge_methods_supported": [
//     "S256"
//   ],
//   "introspection_endpoint": "https://chilkat-dev.onelogin.com/oidc/token/introspection",
//   "introspection_endpoint_auth_methods_supported": [
//     "client_secret_basic",
//     "client_secret_post",
//     "none"
//   ],
//   "revocation_endpoint": "https://chilkat-dev.onelogin.com/oidc/token/revocation",
//   "revocation_endpoint_auth_methods_supported": [
//     "client_secret_basic",
//     "client_secret_post",
//     "none"
//   ],
//   "claim_types_supported": [
//     "normal"
//   ]
// }
// 

authorization_endpoint := CkJsonObject__stringOf(jsonResponse,'authorization_endpoint');
claims_parameter_supported := CkJsonObject_BoolOf(jsonResponse,'claims_parameter_supported');
issuer := CkJsonObject__stringOf(jsonResponse,'issuer');
jwks_uri := CkJsonObject__stringOf(jsonResponse,'jwks_uri');
request_parameter_supported := CkJsonObject_BoolOf(jsonResponse,'request_parameter_supported');
request_uri_parameter_supported := CkJsonObject_BoolOf(jsonResponse,'request_uri_parameter_supported');
token_endpoint := CkJsonObject__stringOf(jsonResponse,'token_endpoint');
userinfo_endpoint := CkJsonObject__stringOf(jsonResponse,'userinfo_endpoint');
introspection_endpoint := CkJsonObject__stringOf(jsonResponse,'introspection_endpoint');
revocation_endpoint := CkJsonObject__stringOf(jsonResponse,'revocation_endpoint');
i := 0;
count_i := CkJsonObject_SizeOfArray(jsonResponse,'acr_values_supported');
while i < count_i do
  begin
    CkJsonObject_putI(jsonResponse,i);
    strVal := CkJsonObject__stringOf(jsonResponse,'acr_values_supported[i]');
    i := i + 1;
  end;

i := 0;
count_i := CkJsonObject_SizeOfArray(jsonResponse,'claims_supported');
while i < count_i do
  begin
    CkJsonObject_putI(jsonResponse,i);
    strVal := CkJsonObject__stringOf(jsonResponse,'claims_supported[i]');
    i := i + 1;
  end;

i := 0;
count_i := CkJsonObject_SizeOfArray(jsonResponse,'grant_types_supported');
while i < count_i do
  begin
    CkJsonObject_putI(jsonResponse,i);
    strVal := CkJsonObject__stringOf(jsonResponse,'grant_types_supported[i]');
    i := i + 1;
  end;

i := 0;
count_i := CkJsonObject_SizeOfArray(jsonResponse,'id_token_signing_alg_values_supported');
while i < count_i do
  begin
    CkJsonObject_putI(jsonResponse,i);
    strVal := CkJsonObject__stringOf(jsonResponse,'id_token_signing_alg_values_supported[i]');
    i := i + 1;
  end;

i := 0;
count_i := CkJsonObject_SizeOfArray(jsonResponse,'response_modes_supported');
while i < count_i do
  begin
    CkJsonObject_putI(jsonResponse,i);
    strVal := CkJsonObject__stringOf(jsonResponse,'response_modes_supported[i]');
    i := i + 1;
  end;

i := 0;
count_i := CkJsonObject_SizeOfArray(jsonResponse,'response_types_supported');
while i < count_i do
  begin
    CkJsonObject_putI(jsonResponse,i);
    strVal := CkJsonObject__stringOf(jsonResponse,'response_types_supported[i]');
    i := i + 1;
  end;

i := 0;
count_i := CkJsonObject_SizeOfArray(jsonResponse,'scopes_supported');
while i < count_i do
  begin
    CkJsonObject_putI(jsonResponse,i);
    strVal := CkJsonObject__stringOf(jsonResponse,'scopes_supported[i]');
    i := i + 1;
  end;

i := 0;
count_i := CkJsonObject_SizeOfArray(jsonResponse,'subject_types_supported');
while i < count_i do
  begin
    CkJsonObject_putI(jsonResponse,i);
    strVal := CkJsonObject__stringOf(jsonResponse,'subject_types_supported[i]');
    i := i + 1;
  end;

i := 0;
count_i := CkJsonObject_SizeOfArray(jsonResponse,'token_endpoint_auth_methods_supported');
while i < count_i do
  begin
    CkJsonObject_putI(jsonResponse,i);
    strVal := CkJsonObject__stringOf(jsonResponse,'token_endpoint_auth_methods_supported[i]');
    i := i + 1;
  end;

i := 0;
count_i := CkJsonObject_SizeOfArray(jsonResponse,'userinfo_signing_alg_values_supported');
while i < count_i do
  begin
    CkJsonObject_putI(jsonResponse,i);
    i := i + 1;
  end;

i := 0;
count_i := CkJsonObject_SizeOfArray(jsonResponse,'code_challenge_methods_supported');
while i < count_i do
  begin
    CkJsonObject_putI(jsonResponse,i);
    strVal := CkJsonObject__stringOf(jsonResponse,'code_challenge_methods_supported[i]');
    i := i + 1;
  end;

i := 0;
count_i := CkJsonObject_SizeOfArray(jsonResponse,'introspection_endpoint_auth_methods_supported');
while i < count_i do
  begin
    CkJsonObject_putI(jsonResponse,i);
    strVal := CkJsonObject__stringOf(jsonResponse,'introspection_endpoint_auth_methods_supported[i]');
    i := i + 1;
  end;

i := 0;
count_i := CkJsonObject_SizeOfArray(jsonResponse,'revocation_endpoint_auth_methods_supported');
while i < count_i do
  begin
    CkJsonObject_putI(jsonResponse,i);
    strVal := CkJsonObject__stringOf(jsonResponse,'revocation_endpoint_auth_methods_supported[i]');
    i := i + 1;
  end;

i := 0;
count_i := CkJsonObject_SizeOfArray(jsonResponse,'claim_types_supported');
while i < count_i do
  begin
    CkJsonObject_putI(jsonResponse,i);
    strVal := CkJsonObject__stringOf(jsonResponse,'claim_types_supported[i]');
    i := i + 1;
  end;

CkHttp_Dispose(http);
CkJsonObject_Dispose(jsonResponse);

end;