Chilkat Online Tools

delphiDll / Zoho CRM REST APIs / Generate Access Token and Refresh Token

Back to Collection Items

var
http: HCkHttp;
success: Boolean;
req: HCkHttpRequest;
jsonFormData1: HCkJsonObject;
jsonFormData2: HCkJsonObject;
jsonFormData3: HCkJsonObject;
resp: HCkHttpResponse;

begin
// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

http := CkHttp_Create();

req := CkHttpRequest_Create();
CkHttpRequest_putHttpVerb(req,'POST');
CkHttpRequest_putPath(req,'/oauth/v2/token');
CkHttpRequest_putContentType(req,'multipart/form-data');

jsonFormData1 := CkJsonObject_Create();
CkHttpRequest_AddParam(req,'client_id',CkJsonObject__emit(jsonFormData1));

jsonFormData2 := CkJsonObject_Create();
CkHttpRequest_AddParam(req,'client_secret',CkJsonObject__emit(jsonFormData2));

jsonFormData3 := CkJsonObject_Create();
CkHttpRequest_AddParam(req,'redirect_uri',CkJsonObject__emit(jsonFormData3));

CkHttpRequest_AddParam(req,'code','{{client-id}}{{client-secret}}{{redirect-uri}}paste_grant_token_here');

CkHttpRequest_AddParam(req,'grant_type','{{client-id}}{{client-secret}}{{redirect-uri}}paste_grant_token_hereauthorization_code');

resp := CkHttp_SynchronousRequest(http,'domain.com',443,True,req);
if (CkHttp_getLastMethodSuccess(http) = False) then
  begin
    Memo1.Lines.Add(CkHttp__lastErrorText(http));
    Exit;
  end;

Memo1.Lines.Add(IntToStr(CkHttpResponse_getStatusCode(resp)));
Memo1.Lines.Add(CkHttpResponse__bodyStr(resp));
CkHttpResponse_Dispose(resp);

CkHttp_Dispose(http);
CkHttpRequest_Dispose(req);
CkJsonObject_Dispose(jsonFormData1);
CkJsonObject_Dispose(jsonFormData2);
CkJsonObject_Dispose(jsonFormData3);

Curl Command

curl -X POST
	--form 'client_id={{client-id}}'
	--form 'client_secret={{client-id}}{{client-secret}}'
	--form 'redirect_uri={{client-id}}{{client-secret}}{{redirect-uri}}'
	--form 'code={{client-id}}{{client-secret}}{{redirect-uri}}paste_grant_token_here'
	--form 'grant_type={{client-id}}{{client-secret}}{{redirect-uri}}paste_grant_token_hereauthorization_code'
https://domain.com/oauth/v2/token

Postman Collection Item JSON

{
  "name": "Generate Access Token and Refresh Token",
  "event": [
    {
      "listen": "test",
      "script": {
        "exec": [
          "if (responseCode.code === 200)",
          "{",
          "    var jsonData = JSON.parse(responseBody);",
          "",
          "    pm.environment.set(\"refresh-token\", jsonData.refresh_token);",
          "    pm.environment.set(\"access-token\", jsonData.access_token);",
          "    pm.environment.set(\"expiry-time\", Date.now() + parseInt(jsonData.expires_in));",
          "}"
        ],
        "type": "text/javascript"
      }
    }
  ],
  "request": {
    "auth": {
      "type": "noauth"
    },
    "method": "POST",
    "header": [
    ],
    "body": {
      "mode": "formdata",
      "formdata": [
        {
          "key": "client_id",
          "value": "{{client-id}}",
          "type": "text"
        },
        {
          "key": "client_secret",
          "value": "{{client-secret}}",
          "type": "text"
        },
        {
          "key": "redirect_uri",
          "value": "{{redirect-uri}}",
          "type": "text"
        },
        {
          "key": "code",
          "value": "paste_grant_token_here",
          "type": "text"
        },
        {
          "key": "grant_type",
          "value": "authorization_code",
          "type": "text"
        }
      ]
    },
    "url": {
      "raw": "{{accounts-url}}/oauth/v2/token",
      "host": [
        "{{accounts-url}}"
      ],
      "path": [
        "oauth",
        "v2",
        "token"
      ]
    },
    "description": "### Step 3: Generate Access Token and Refresh Token\n\nOAuth2.0 requests are usually authenticated with an **access token**, which is passed as bearer token. To use this access token, you need to construct a normal HTTP request and include it in an Authorization header along with the value of Bearer."
  },
  "response": [
  ]
}