(Lianja) citi Developer OAuth2 Client Credentials Grant

Get access token for your application credentials. You can use this for citi APIs which do not require customer credential verification and consent (e.g. Onboarding).

Note: This example requires Chilkat v11.0.0 or greater.

For more information, see https://sandbox.developerhub.citi.com/api/united-states/retail-bank/identity-security/authorize/documentation

Chilkat Lianja Extension Download Chilkat Lianja Extension

llSuccess = .F.

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

loHttp = createobject("CkHttp")

// Implements the following CURL command:

// curl --request POST \
//   --url https://sandbox.apihub.citi.com/gcb/api/clientCredentials/oauth2/token/us/gcb \
//   --header 'accept: application/json' \
//   --user client-id:client-secret \
//   --header 'content-type: application/x-www-form-urlencoded' \
//   --data 'grant_type=client_credentials&scope=%2Fapi'

loHttp.Login = "client-id"
loHttp.Password = "client-secret"

loReq = createobject("CkHttpRequest")
loReq.HttpVerb = "POST"
loReq.Path = "/gcb/api/clientCredentials/oauth2/token/us/gcb"
loReq.ContentType = "application/x-www-form-urlencoded"
loReq.AddParam("grant_type","client_credentials")
loReq.AddParam("scope","/api")
loReq.AddHeader("accept","application/json")

loResp = createobject("CkHttpResponse")
llSuccess = loHttp.HttpReq("https://sandbox.apihub.citi.com/gcb/api/clientCredentials/oauth2/token/us/gcb",loReq,loResp)
if (llSuccess = .F.) then
    ? loHttp.LastErrorText
    release loHttp
    release loReq
    release loResp
    return
endif

loSbResponseBody = createobject("CkStringBuilder")
loResp.GetBodySb(loSbResponseBody)
loJResp = createobject("CkJsonObject")
loJResp.LoadSb(loSbResponseBody)
loJResp.EmitCompact = .F.

? "Response Body:"
? loJResp.Emit()

lnRespStatusCode = loResp.StatusCode
? "Response Status Code = " + str(lnRespStatusCode)
if (lnRespStatusCode >= 400) then
    ? "Response Header:"
    ? loResp.Header
    ? "Failed."
    release loHttp
    release loReq
    release loResp
    release loSbResponseBody
    release loJResp
    return
endif

llSuccess = loJResp.WriteFile("qa_data/tokens/citi_client_credentials.json")
if (llSuccess = .F.) then
    ? "Failed to save JSON access token file."
    release loHttp
    release loReq
    release loResp
    release loSbResponseBody
    release loJResp
    return
endif

//  Sample JSON response:
//  (Sample code for parsing the JSON response is shown below)

//  {
//    "token_type": "bearer",
//    "access_token": "AAIkMjdh ... 3fsWb7zJ0s",
//    "expires_in": 1800,
//    "consented_on": 1584817860,
//    "scope": "/api"
//  }

//  Sample code for parsing the JSON response...
//  Use the following online tool to generate parsing code from sample JSON:
//  Generate Parsing Code from JSON

lcToken_type = loJResp.StringOf("token_type")
lcAccess_token = loJResp.StringOf("access_token")
lnExpires_in = loJResp.IntOf("expires_in")
lnConsented_on = loJResp.IntOf("consented_on")
lcScope = loJResp.StringOf("scope")


release loHttp
release loReq
release loResp
release loSbResponseBody
release loJResp