Chilkat Online Tools

VB.NET / ForgeRock Identity Cloud Collection / Step 3: Grant Consent Using the User Code

Back to Collection Items

' This example assumes the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

Dim http As New Chilkat.Http
Dim success As Boolean

Dim req As New Chilkat.HttpRequest
req.AddParam("decision","allow")

Dim jsonParam2 As New Chilkat.JsonObject
req.AddParam("csrf",jsonParam2.Emit())

Dim jsonParam3 As New Chilkat.JsonObject
req.AddParam("user_code",jsonParam3.Emit())

req.AddHeader("Authorization","Bearer <access_token>")
req.AddHeader("Cookie","{{demoSSOToken}}")

Dim resp As Chilkat.HttpResponse = http.PostUrlEncoded("https://<tenant-name>.forgeblocks.com/am/oauth2/realms/root/realms/alpha/device/user",req)
If (http.LastMethodSuccess = False) Then
    Debug.WriteLine(http.LastErrorText)
    Exit Sub
End If


Debug.WriteLine(resp.StatusCode)
Debug.WriteLine(resp.BodyStr)

Curl Command

curl -X POST
	-H "Authorization: Bearer <access_token>"
	-H "Cookie: {{demoSSOToken}}"
	--data-urlencode 'decision=allow'
	--data-urlencode 'csrf={{demoSSOToken}}'
	--data-urlencode 'user_code={{user_code}}'
https://<tenant-name>.forgeblocks.com/am/oauth2/realms/root/realms/alpha/device/user

Postman Collection Item JSON

{
  "name": "Step 3: Grant Consent Using the User Code",
  "event": [
    {
      "listen": "test",
      "script": {
        "exec": [
          "pm.test(\"Status code is 200\", () => {",
          "  pm.expect(pm.response.code).to.eql(200);",
          "});",
          "",
          "pm.test(\"Response contains 'done: true'.\",() => {",
          "  pm.expect(pm.response.text()).to.include(\"done: true\");",
          "});"
        ],
        "type": "text/javascript"
      }
    }
  ],
  "request": {
    "method": "POST",
    "header": [
      {
        "key": "Cookie",
        "value": "{{demoSSOToken}}",
        "description": "SSO token to protect against cross-site request forgery.",
        "type": "text"
      }
    ],
    "body": {
      "mode": "urlencoded",
      "urlencoded": [
        {
          "key": "decision",
          "value": "allow",
          "description": "Decision that grants access to the scopes in the request (to the client).",
          "type": "text"
        },
        {
          "key": "csrf",
          "value": "{{demoSSOToken}}",
          "description": "SSO token to protect against cross-site request forgery.",
          "type": "text"
        },
        {
          "key": "user_code",
          "value": "{{user_code}}",
          "description": "The user code for the device.",
          "type": "text"
        }
      ]
    },
    "url": {
      "raw": "{{amUrl}}/oauth2{{realm}}/device/user",
      "host": [
        "{{amUrl}}"
      ],
      "path": [
        "oauth2{{realm}}",
        "device",
        "user"
      ]
    },
    "description": "Grants consent using the user code recieved in the previous call to allow the client device to access resources."
  },
  "response": [
    {
      "name": "Example - page contains \"done: true\"",
      "originalRequest": {
        "method": "POST",
        "header": [
          {
            "key": "Cookie",
            "value": "{{demoSSOToken}}",
            "description": "SSO token to protect against cross-site request forgery.",
            "type": "text"
          }
        ],
        "body": {
          "mode": "urlencoded",
          "urlencoded": [
            {
              "key": "decision",
              "value": "allow",
              "description": "Decision that grants access to the scopes in the request (to the client).",
              "type": "text"
            },
            {
              "key": "csrf",
              "value": "{{demoSSOToken}}",
              "description": "SSO token to protect against cross-site request forgery.",
              "type": "text"
            },
            {
              "key": "user_code",
              "value": "{{user_code}}",
              "description": "The user code for the device.",
              "type": "text"
            }
          ]
        },
        "url": {
          "raw": "{{amUrl}}/oauth2{{realm}}/device/user",
          "host": [
            "{{amUrl}}"
          ],
          "path": [
            "oauth2{{realm}}",
            "device",
            "user"
          ]
        }
      },
      "status": "OK",
      "code": 200,
      "_postman_previewlanguage": "html",
      "header": [
        {
          "key": "X-Frame-Options",
          "value": "SAMEORIGIN"
        },
        {
          "key": "X-Content-Type-Options",
          "value": "nosniff"
        },
        {
          "key": "Content-Type",
          "value": "text/html;charset=UTF-8"
        },
        {
          "key": "Content-Length",
          "value": "969"
        },
        {
          "key": "Date",
          "value": "Thu, 13 Aug 2020 12:19:21 GMT"
        }
      ],
      "cookie": [
      ],
      "body": "<!DOCTYPE html>\n<!--\n  Copyright 2015-2018 ForgeRock AS. All Rights Reserved\n \n  Use of this code requires a commercial software license with ForgeRock AS.\n  or with one of its affiliates. All use shall be exclusively subject\n  to such license between the licensee and ForgeRock AS.\n-->\n<html lang=\"en\">\n    <head>\n        <meta charset=\"utf-8\">\n        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <meta name=\"description\" content=\"OAuth2 Authorization\">\n        <title>OAuth2 Authorization Server</title>\n    </head>\n    <body style=\"display:none\">\n        <div id=\"wrapper\">Loading...</div>\n        <footer id=\"footer\" class=\"footer\"></footer>\n        <script type=\"text/javascript\">\n  pageData = {\n      locale: \"en_GB\",\n      baseUrl : \"http://openam.example.com:8080/openam/XUI/\",\n      realm : \"\\//XUI\",\n      done: true\n  };\n</script>\n        <script src=\"http://openam.example.com:8080/openam/XUI/main-device.js\"></script>\n    </body>\n</html>"
    }
  ]
}