(JavaScript) RSAP Union API - Get OAuth2 Access Token
Demonstrates how to get an OAuth2 access token for the RSAP Union API. Note: This uses the client credentials flow, which does NOT require an interactive engagement using a browser. For more information, see https://app.swaggerhub.com/apis-docs/pderas/RSAP/2.0.1#/Authentication/getOauthToken
var success = false;
// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.
var http = new CkHttp();
// The following JSON is sent in the request body.
// {
// "grant_type": "client_credentials",
// "client_id": 1234,
// "client_secret": "23456abcde"
// }
var json = new CkJsonObject();
json.UpdateString("grant_type","client_credentials");
json.UpdateInt("client_id",1234);
json.UpdateString("client_secret","23456abcde");
http.SetRequestHeader("Content-type","application/json");
// Add the client certificate TLS authentication.
var cert = new CkCert();
success = cert.LoadFromFile("qa_data/certs_and_keys/union_client_certificate.crt");
if (success == false) {
console.log(cert.LastErrorText);
return;
}
var privKey = new CkPrivateKey();
success = privKey.LoadAnyFormatFile("qa_data/certs_and_keys/union_client_certificate.nopass.key","");
if (success == false) {
console.log(privKey.LastErrorText);
return;
}
// Associate the private key with the cert.
// This will fail if the private key is not actually the correct one that corresponds to the public key stored within the cert.
success = cert.SetPrivateKey(privKey);
if (success == false) {
console.log(cert.LastErrorText);
return;
}
// Tell HTTP to use the cert for client TLS certificate authentication.
success = http.SetSslClientCert(cert);
if (success == false) {
console.log(http.LastErrorText);
return;
}
var resp = new CkHttpResponse();
success = http.HttpJson("POST","https://api-test.rsap.ca/oauth/token",json,"application/json",resp);
if (success == false) {
console.log(http.LastErrorText);
return;
}
var sbResponseBody = new CkStringBuilder();
resp.GetBodySb(sbResponseBody);
var jResp = new CkJsonObject();
jResp.LoadSb(sbResponseBody);
jResp.EmitCompact = false;
console.log("Response Body:");
console.log(jResp.Emit());
var respStatusCode = resp.StatusCode;
console.log("Response Status Code = " + respStatusCode);
if (respStatusCode >= 400) {
console.log("Response Header:");
console.log(resp.Header);
console.log("Failed.");
return;
}
// Sample JSON response:
// (Sample code for parsing the JSON response is shown below)
// {
// "token_type": "Bearer",
// "expires_in": 3600,
// "access_token": "eyJ0eXAi...LnE"
// }
// This token expires in 1 hour. Your application could re-use the same token for up to an hour,
// or it can simply get a new access token before each request (if you're not doing too many requests).
success = jResp.WriteFile("qa_data/tokens/rsapToken.json");
|