Chilkat Online Tools

TCL / Zoho CRM REST APIs / Generate Access Token and Refresh Token

Back to Collection Items

load ./chilkat.dll

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set http [new_CkHttp]

set req [new_CkHttpRequest]

CkHttpRequest_put_HttpVerb $req "POST"
CkHttpRequest_put_Path $req "/oauth/v2/token"
CkHttpRequest_put_ContentType $req "multipart/form-data"

set jsonFormData1 [new_CkJsonObject]

CkHttpRequest_AddStringForUpload2 $req "client_id" "" $jsonFormData1 "utf-8" "application/json"

set jsonFormData2 [new_CkJsonObject]

CkHttpRequest_AddStringForUpload2 $req "client_secret" "" $jsonFormData2 "utf-8" "application/json"

set jsonFormData3 [new_CkJsonObject]

CkHttpRequest_AddStringForUpload2 $req "redirect_uri" "" $jsonFormData3 "utf-8" "application/json"

CkHttpRequest_AddParam $req "code" "{{client-id}}{{client-secret}}{{redirect-uri}}paste_grant_token_here"

CkHttpRequest_AddParam $req "grant_type" "{{client-id}}{{client-secret}}{{redirect-uri}}paste_grant_token_hereauthorization_code"

set resp [new_CkHttpResponse]

set success [CkHttp_HttpSReq $http "domain.com" 443 1 $req $resp]
if {$success == 0} then {
    puts [CkHttp_lastErrorText $http]
    delete_CkHttp $http
    delete_CkHttpRequest $req
    delete_CkJsonObject $jsonFormData1
    delete_CkJsonObject $jsonFormData2
    delete_CkJsonObject $jsonFormData3
    delete_CkHttpResponse $resp
    exit
}

puts [CkHttpResponse_get_StatusCode $resp]
puts [CkHttpResponse_bodyStr $resp]

delete_CkHttp $http
delete_CkHttpRequest $req
delete_CkJsonObject $jsonFormData1
delete_CkJsonObject $jsonFormData2
delete_CkJsonObject $jsonFormData3
delete_CkHttpResponse $resp

Curl Command

curl -X POST
	--form 'client_id={{client-id}}'
	--form 'client_secret={{client-id}}{{client-secret}}'
	--form 'redirect_uri={{client-id}}{{client-secret}}{{redirect-uri}}'
	--form 'code={{client-id}}{{client-secret}}{{redirect-uri}}paste_grant_token_here'
	--form 'grant_type={{client-id}}{{client-secret}}{{redirect-uri}}paste_grant_token_hereauthorization_code'
https://domain.com/oauth/v2/token

Postman Collection Item JSON

{
  "name": "Generate Access Token and Refresh Token",
  "event": [
    {
      "listen": "test",
      "script": {
        "exec": [
          "if (responseCode.code === 200)",
          "{",
          "    var jsonData = JSON.parse(responseBody);",
          "",
          "    pm.environment.set(\"refresh-token\", jsonData.refresh_token);",
          "    pm.environment.set(\"access-token\", jsonData.access_token);",
          "    pm.environment.set(\"expiry-time\", Date.now() + parseInt(jsonData.expires_in));",
          "}"
        ],
        "type": "text/javascript"
      }
    }
  ],
  "request": {
    "auth": {
      "type": "noauth"
    },
    "method": "POST",
    "header": [
    ],
    "body": {
      "mode": "formdata",
      "formdata": [
        {
          "key": "client_id",
          "value": "{{client-id}}",
          "type": "text"
        },
        {
          "key": "client_secret",
          "value": "{{client-secret}}",
          "type": "text"
        },
        {
          "key": "redirect_uri",
          "value": "{{redirect-uri}}",
          "type": "text"
        },
        {
          "key": "code",
          "value": "paste_grant_token_here",
          "type": "text"
        },
        {
          "key": "grant_type",
          "value": "authorization_code",
          "type": "text"
        }
      ]
    },
    "url": {
      "raw": "{{accounts-url}}/oauth/v2/token",
      "host": [
        "{{accounts-url}}"
      ],
      "path": [
        "oauth",
        "v2",
        "token"
      ]
    },
    "description": "### Step 3: Generate Access Token and Refresh Token\n\nOAuth2.0 requests are usually authenticated with an **access token**, which is passed as bearer token. To use this access token, you need to construct a normal HTTP request and include it in an Authorization header along with the value of Bearer."
  },
  "response": [
  ]
}