DataFlex / ForgeRock Identity Cloud Collection / Step 3: Exchange the Authorization Code for an Access Token
Back to Collection Items
Use ChilkatAx-win32.pkg
Procedure Test
Handle hoHttp
Boolean iSuccess
Variant vReq
Handle hoReq
Handle hoJsonParam2
Handle hoJsonParam3
Handle hoJsonParam4
Handle hoJsonParam5
Variant vResp
Handle hoResp
Variant vSbResponseBody
Handle hoSbResponseBody
Handle hoJResp
Integer iRespStatusCode
String sAccess_token
String sRefresh_token
String sScope
String sToken_type
Integer iExpires_in
String sTemp1
Boolean bTemp1
// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.
Get Create (RefClass(cComChilkatHttp)) To hoHttp
If (Not(IsComObjectCreated(hoHttp))) Begin
Send CreateComObject of hoHttp
End
Get Create (RefClass(cComChilkatHttpRequest)) To hoReq
If (Not(IsComObjectCreated(hoReq))) Begin
Send CreateComObject of hoReq
End
Send ComAddParam To hoReq "grant_type" "authorization_code"
Get Create (RefClass(cComChilkatJsonObject)) To hoJsonParam2
If (Not(IsComObjectCreated(hoJsonParam2))) Begin
Send CreateComObject of hoJsonParam2
End
Get ComEmit Of hoJsonParam2 To sTemp1
Send ComAddParam To hoReq "code" sTemp1
Get Create (RefClass(cComChilkatJsonObject)) To hoJsonParam3
If (Not(IsComObjectCreated(hoJsonParam3))) Begin
Send CreateComObject of hoJsonParam3
End
Get ComEmit Of hoJsonParam3 To sTemp1
Send ComAddParam To hoReq "client_id" sTemp1
Get Create (RefClass(cComChilkatJsonObject)) To hoJsonParam4
If (Not(IsComObjectCreated(hoJsonParam4))) Begin
Send CreateComObject of hoJsonParam4
End
Get ComEmit Of hoJsonParam4 To sTemp1
Send ComAddParam To hoReq "client_secret" sTemp1
Get Create (RefClass(cComChilkatJsonObject)) To hoJsonParam5
If (Not(IsComObjectCreated(hoJsonParam5))) Begin
Send CreateComObject of hoJsonParam5
End
Get ComEmit Of hoJsonParam5 To sTemp1
Send ComAddParam To hoReq "redirect_uri" sTemp1
Send ComAddHeader To hoReq "Authorization" "Bearer <access_token>"
Get pvComObject of hoReq to vReq
Get ComPostUrlEncoded Of hoHttp "https://<tenant-name>.forgeblocks.com/am/oauth2/realms/root/realms/alpha/access_token" vReq To vResp
If (IsComObject(vResp)) Begin
Get Create (RefClass(cComChilkatHttpResponse)) To hoResp
Set pvComObject Of hoResp To vResp
End
Get ComLastMethodSuccess Of hoHttp To bTemp1
If (bTemp1 = False) Begin
Get ComLastErrorText Of hoHttp To sTemp1
Showln sTemp1
Procedure_Return
End
Get Create (RefClass(cComChilkatStringBuilder)) To hoSbResponseBody
If (Not(IsComObjectCreated(hoSbResponseBody))) Begin
Send CreateComObject of hoSbResponseBody
End
Get pvComObject of hoSbResponseBody to vSbResponseBody
Get ComGetBodySb Of hoResp vSbResponseBody To iSuccess
Get Create (RefClass(cComChilkatJsonObject)) To hoJResp
If (Not(IsComObjectCreated(hoJResp))) Begin
Send CreateComObject of hoJResp
End
Get pvComObject of hoSbResponseBody to vSbResponseBody
Get ComLoadSb Of hoJResp vSbResponseBody To iSuccess
Set ComEmitCompact Of hoJResp To False
Showln "Response Body:"
Get ComEmit Of hoJResp To sTemp1
Showln sTemp1
Get ComStatusCode Of hoResp To iRespStatusCode
Showln "Response Status Code = " iRespStatusCode
If (iRespStatusCode >= 400) Begin
Showln "Response Header:"
Get ComHeader Of hoResp To sTemp1
Showln sTemp1
Showln "Failed."
Send Destroy of hoResp
Procedure_Return
End
Send Destroy of hoResp
// Sample JSON response:
// (Sample code for parsing the JSON response is shown below)
// {
// "access_token": "eyJ0eXAiJ9.eyJzdWIiOiJkZPXXcM",
// "refresh_token": "eyJ0eXAiOiJKV1QiLC.eyl0VHJXpdhFiWDw",
// "scope": "write",
// "token_type": "Bearer",
// "expires_in": 3599
// }
// Sample code for parsing the JSON response...
// Use this online tool to generate parsing code from sample JSON: Generate JSON Parsing Code
Get ComStringOf Of hoJResp "access_token" To sAccess_token
Get ComStringOf Of hoJResp "refresh_token" To sRefresh_token
Get ComStringOf Of hoJResp "scope" To sScope
Get ComStringOf Of hoJResp "token_type" To sToken_type
Get ComIntOf Of hoJResp "expires_in" To iExpires_in
End_Procedure
Curl Command
curl -X POST
-H "Authorization: Bearer <access_token>"
-H "Content-Type: application/x-www-form-urlencoded"
--data-urlencode 'grant_type=authorization_code'
--data-urlencode 'code={{authorization_code}}'
--data-urlencode 'client_id={{postmanConfidentialClientId}}'
--data-urlencode 'client_secret={{postmanClientSecret}}'
--data-urlencode 'redirect_uri={{redirect_uri}}'
https://<tenant-name>.forgeblocks.com/am/oauth2/realms/root/realms/alpha/access_token
Postman Collection Item JSON
{
"name": "Step 3: Exchange the Authorization Code for an Access Token",
"event": [
{
"listen": "prerequest",
"script": {
"exec": [
""
],
"type": "text/javascript"
}
},
{
"listen": "test",
"script": {
"exec": [
"var jsonData = JSON.parse(responseBody);",
"",
"if(jsonData.access_token && jsonData.access_token != \"\")",
"{",
" pm.globals.set(\"access_token\", jsonData.access_token);",
"}",
"",
"if(jsonData.refresh_token && jsonData.refresh_token != \"\")",
"{",
" pm.globals.set(\"refresh_token\", jsonData.refresh_token);",
"}",
"",
"// Tests",
"",
"pm.test(\"Status code is 200\", () => {",
" pm.expect(pm.response.code).to.eql(200);",
"});",
"",
"pm.test(\"Response contains access_token\", function () {",
" pm.expect(jsonData.access_token).to.be.a(\"string\");",
"});",
"",
""
],
"type": "text/javascript"
}
}
],
"request": {
"method": "POST",
"header": [
{
"key": "Content-Type",
"name": "Content-Type",
"value": "application/x-www-form-urlencoded",
"type": "text"
}
],
"body": {
"mode": "urlencoded",
"urlencoded": [
{
"key": "grant_type",
"value": "authorization_code",
"description": "The grant type required for the Authorization Code grant.",
"type": "text"
},
{
"key": "code",
"value": "{{authorization_code}}",
"description": "The authentication code.",
"type": "text"
},
{
"key": "client_id",
"value": "{{postmanConfidentialClientId}}",
"description": "The ID of the Confidential OAuth Client.",
"type": "text"
},
{
"key": "client_secret",
"value": "{{postmanClientSecret}}",
"description": "The secret of the Confidential OAuth Client. See the ForgeRock documentation for stronger methods of client authentication.",
"type": "text"
},
{
"key": "redirect_uri",
"value": "{{redirect_uri}}",
"description": "The complete URI to which client redirects the user if the request is successful.",
"type": "text"
}
]
},
"url": {
"raw": "{{amUrl}}/oauth2{{realm}}/access_token",
"host": [
"{{amUrl}}"
],
"path": [
"oauth2{{realm}}",
"access_token"
]
},
"description": "Authenticate with the authorization server using the details of the confidential client and the authorization code recieved in the previous call.\n"
},
"response": [
{
"name": "Example",
"originalRequest": {
"method": "POST",
"header": [
{
"key": "Content-Type",
"name": "Content-Type",
"value": "application/x-www-form-urlencoded",
"type": "text"
}
],
"body": {
"mode": "urlencoded",
"urlencoded": [
{
"key": "grant_type",
"value": "authorization_code",
"description": "The grant type required for the Authorization Code grant.",
"type": "text"
},
{
"key": "code",
"value": "{{authorization_code}}",
"description": "The authentication code.",
"type": "text"
},
{
"key": "client_id",
"value": "{{postmanConfidentialClientId}}",
"description": "The ID of the Confidential OAuth Client.",
"type": "text"
},
{
"key": "client_secret",
"value": "{{postmanClientSecret}}",
"description": "The secret of the Confidential OAuth Client. See the ForgeRock documentation for stronger methods of client authentication.",
"type": "text"
},
{
"key": "redirect_uri",
"value": "{{redirect_uri}}",
"description": "The complete URI to which client redirects the user if the request is successful.",
"type": "text"
}
]
},
"url": {
"raw": "{{amUrl}}/oauth2{{realm}}/access_token",
"host": [
"{{amUrl}}"
],
"path": [
"oauth2{{realm}}",
"access_token"
]
}
},
"status": "OK",
"code": 200,
"_postman_previewlanguage": "json",
"header": [
{
"key": "X-Frame-Options",
"value": "SAMEORIGIN"
},
{
"key": "X-Content-Type-Options",
"value": "nosniff"
},
{
"key": "Cache-Control",
"value": "no-store"
},
{
"key": "Pragma",
"value": "no-cache"
},
{
"key": "Content-Type",
"value": "application/json;charset=UTF-8"
},
{
"key": "Content-Length",
"value": "1644"
},
{
"key": "Date",
"value": "Thu, 13 Aug 2020 12:11:06 GMT"
}
],
"cookie": [
],
"body": "{\n \"access_token\": \"eyJ0eXAiJ9.eyJzdWIiOiJkZPXXcM\",\n \"refresh_token\": \"eyJ0eXAiOiJKV1QiLC.eyl0VHJXpdhFiWDw\",\n \"scope\": \"write\",\n \"token_type\": \"Bearer\",\n \"expires_in\": 3599\n}"
}
]
}
