TCL / Salesforce Platform APIs / OpenID Connect Token Introspection Endpoint
Back to Collection Items
load ./chilkat.dll
# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.
set http [new_CkHttp]
set req [new_CkHttpRequest]
set jsonParam1 [new_CkJsonObject]
CkHttpRequest_AddParam $req "token" [CkJsonObject_emit $jsonParam1]
CkHttpRequest_AddParam $req "token_type_hint" "access_token"
set jsonParam3 [new_CkJsonObject]
CkHttpRequest_AddParam $req "client_id" [CkJsonObject_emit $jsonParam3]
set jsonParam4 [new_CkJsonObject]
CkHttpRequest_AddParam $req "client_secret" [CkJsonObject_emit $jsonParam4]
CkHttpRequest_AddHeader $req "Accept" "application/json"
set resp [new_CkHttpResponse]
CkHttpRequest_put_HttpVerb $req "POST"
CkHttpRequest_put_ContentType $req "application/x-www-form-urlencoded"
set success [CkHttp_HttpReq $http "https://login.salesforce.com{{site}}/services/oauth2/introspect" $req $resp]
if {$success == 0} then {
puts [CkHttp_lastErrorText $http]
delete_CkHttp $http
delete_CkHttpRequest $req
delete_CkJsonObject $jsonParam1
delete_CkJsonObject $jsonParam3
delete_CkJsonObject $jsonParam4
delete_CkHttpResponse $resp
exit
}
set sbResponseBody [new_CkStringBuilder]
CkHttpResponse_GetBodySb $resp $sbResponseBody
set jResp [new_CkJsonObject]
CkJsonObject_LoadSb $jResp $sbResponseBody
CkJsonObject_put_EmitCompact $jResp 0
puts "Response Body:"
puts [CkJsonObject_emit $jResp]
set respStatusCode [CkHttpResponse_get_StatusCode $resp]
puts "Response Status Code = $respStatusCode"
if {$respStatusCode >= 400} then {
puts "Response Header:"
puts [CkHttpResponse_header $resp]
puts "Failed."
delete_CkHttp $http
delete_CkHttpRequest $req
delete_CkJsonObject $jsonParam1
delete_CkJsonObject $jsonParam3
delete_CkJsonObject $jsonParam4
delete_CkHttpResponse $resp
delete_CkStringBuilder $sbResponseBody
delete_CkJsonObject $jResp
exit
}
# Sample JSON response:
# (Sample code for parsing the JSON response is shown below)
# {
# "active": true,
# "scope": "<scope_list>",
# "client_id": "<client_id>",
# "username": "<username>",
# "sub": "https://login.salesforce.com/id/00D.../005...",
# "token_type": "access_token",
# "exp": <timestamp>,
# "iat": <timestamp>,
# "nbf": <timestamp>
# }
# Sample code for parsing the JSON response...
# Use this online tool to generate parsing code from sample JSON: Generate JSON Parsing Code
set active [CkJsonObject_BoolOf $jResp "active"]
set scope [CkJsonObject_stringOf $jResp "scope"]
set client_id [CkJsonObject_stringOf $jResp "client_id"]
set username [CkJsonObject_stringOf $jResp "username"]
set v_sub [CkJsonObject_stringOf $jResp "sub"]
set token_type [CkJsonObject_stringOf $jResp "token_type"]
set exp [CkJsonObject_IntOf $jResp "exp"]
set iat [CkJsonObject_IntOf $jResp "iat"]
set nbf [CkJsonObject_IntOf $jResp "nbf"]
delete_CkHttp $http
delete_CkHttpRequest $req
delete_CkJsonObject $jsonParam1
delete_CkJsonObject $jsonParam3
delete_CkJsonObject $jsonParam4
delete_CkHttpResponse $resp
delete_CkStringBuilder $sbResponseBody
delete_CkJsonObject $jResp
Curl Command
curl -X POST
-H "Content-Type: application/x-www-form-urlencoded"
-H "Accept: application/json"
--data-urlencode 'token={{_accessToken}}'
--data-urlencode 'token_type_hint=access_token'
--data-urlencode 'client_id={{clientId}}'
--data-urlencode 'client_secret={{clientSecret}}'
https://login.salesforce.com{{site}}/services/oauth2/introspect
Postman Collection Item JSON
{
"name": "OpenID Connect Token Introspection Endpoint",
"request": {
"auth": {
"type": "noauth"
},
"method": "POST",
"header": [
{
"key": "Content-Type",
"name": "Content-Type",
"value": "application/x-www-form-urlencoded",
"type": "text"
},
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "urlencoded",
"urlencoded": [
{
"key": "token",
"value": "{{_accessToken}}",
"type": "text"
},
{
"key": "token_type_hint",
"value": "access_token",
"type": "text"
},
{
"key": "client_id",
"value": "{{clientId}}",
"type": "text"
},
{
"key": "client_secret",
"value": "{{clientSecret}}",
"type": "text"
}
]
},
"url": {
"raw": "{{url}}{{site}}/services/oauth2/introspect",
"host": [
"{{url}}{{site}}"
],
"path": [
"services",
"oauth2",
"introspect"
]
}
},
"response": [
{
"name": "Successful OpenID Connect Token Introspection Endpoint",
"originalRequest": {
"method": "POST",
"header": [
{
"key": "Content-Type",
"value": "application/x-www-form-urlencoded"
},
{
"key": "Accept",
"value": "application/json"
}
],
"body": {
"mode": "urlencoded",
"urlencoded": [
{
"key": "token",
"value": "{{_accessToken}}",
"type": "text"
},
{
"key": "token_type_hint",
"value": "access_token",
"type": "text"
},
{
"key": "client_id",
"value": "{{clientId}}",
"type": "text"
},
{
"key": "client_secret",
"value": "{{clientSecret}}",
"type": "text"
}
]
},
"url": {
"raw": "{{url}}{{site}}/services/oauth2/introspect",
"host": [
"{{url}}{{site}}"
],
"path": [
"services",
"oauth2",
"introspect"
]
}
},
"status": "OK",
"code": 200,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Date",
"value": "Thu, 16 Nov 2023 15:54:42 GMT"
},
{
"key": "Strict-Transport-Security",
"value": "max-age=63072000; includeSubDomains"
},
{
"key": "X-Content-Type-Options",
"value": "nosniff"
},
{
"key": "X-XSS-Protection",
"value": "1; mode=block"
},
{
"key": "X-Robots-Tag",
"value": "none"
},
{
"key": "Cache-Control",
"value": "no-cache,must-revalidate,max-age=0,no-store,private"
},
{
"key": "Content-Type",
"value": "application/json;charset=UTF-8"
},
{
"key": "Vary",
"value": "Accept-Encoding"
},
{
"key": "Content-Encoding",
"value": "gzip"
},
{
"key": "Transfer-Encoding",
"value": "chunked"
}
],
"cookie": [
],
"body": "{\n \"active\": true,\n \"scope\": \"<scope_list>\",\n \"client_id\": \"<client_id>\",\n \"username\": \"<username>\",\n \"sub\": \"https://login.salesforce.com/id/00D.../005...\",\n \"token_type\": \"access_token\",\n \"exp\": <timestamp>,\n \"iat\": <timestamp>,\n \"nbf\": <timestamp>\n}"
}
]
}
