Sample code for 30+ languages & platforms
Node.js

RSAP Union API - Get OAuth2 Access Token

See more _Miscellaneous_ Examples

Demonstrates how to get an OAuth2 access token for the RSAP Union API. Note: This uses the client credentials flow, which does NOT require an interactive engagement using a browser.

Chilkat Node.js Downloads

Node.js
NODEJS_PRELUDE

function chilkatExample() {

    var success = false;

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    var http = new chilkat.Http();

    // The following JSON is sent in the request body.

    // {
    //   "grant_type": "client_credentials",
    //   "client_id": 1234,
    //   "client_secret": "23456abcde"
    // }

    var json = new chilkat.JsonObject();
    json.UpdateString("grant_type","client_credentials");
    json.UpdateInt("client_id",1234);
    json.UpdateString("client_secret","23456abcde");

    http.SetRequestHeader("Content-type","application/json");

    // Add the client certificate TLS authentication.
    var cert = new chilkat.Cert();
    success = cert.LoadFromFile("qa_data/certs_and_keys/union_client_certificate.crt");
    if (success == false) {
        console.log(cert.LastErrorText);
        return;
    }

    var privKey = new chilkat.PrivateKey();
    success = privKey.LoadAnyFormatFile("qa_data/certs_and_keys/union_client_certificate.nopass.key","");
    if (success == false) {
        console.log(privKey.LastErrorText);
        return;
    }

    // Associate the private key with the cert.
    // This will fail if the private key is not actually the correct one that corresponds to the public key stored within the cert.
    success = cert.SetPrivateKey(privKey);
    if (success == false) {
        console.log(cert.LastErrorText);
        return;
    }

    // Tell HTTP to use the cert for client TLS certificate authentication.
    success = http.SetSslClientCert(cert);
    if (success == false) {
        console.log(http.LastErrorText);
        return;
    }

    var resp = new chilkat.HttpResponse();
    success = http.HttpJson("POST","https://api-test.rsap.ca/oauth/token",json,"application/json",resp);
    if (success == false) {
        console.log(http.LastErrorText);
        return;
    }

    var sbResponseBody = new chilkat.StringBuilder();
    resp.GetBodySb(sbResponseBody);
    var jResp = new chilkat.JsonObject();
    jResp.LoadSb(sbResponseBody);
    jResp.EmitCompact = false;

    console.log("Response Body:");
    console.log(jResp.Emit());

    var respStatusCode = resp.StatusCode;
    console.log("Response Status Code = " + respStatusCode);
    if (respStatusCode >= 400) {
        console.log("Response Header:");
        console.log(resp.Header);
        console.log("Failed.");
        return;
    }

    // Sample JSON response:
    // (Sample code for parsing the JSON response is shown below)

    // {
    //   "token_type": "Bearer",
    //   "expires_in": 3600,
    //   "access_token": "eyJ0eXAi...LnE"
    // }

    // This token expires in 1 hour.  Your application could re-use the same token for up to an hour,
    // or it can simply get a new access token before each request (if you're not doing too many requests).
    success = jResp.WriteFile("qa_data/tokens/rsapToken.json");

}

chilkatExample();