How To Get OAuth 2.0 Access Token & Refresh Token
Hi All ,
below are steps to get OAuth 2.0 Access Token & Refresh Token
To Get OAuth 2.0 Access , first step is to get access code
How to get access code ,
1) Get Redirect URL http://xxxx/getAccessToken . (It can be whatever you want, as long as you reference it in the API call.)
2) URL-encode the Client ID and the State to properly format any special characters.
3) Enter URL encoded values in below URL:
https://xxxx/auth/oauth2/authorize?client_id=xxxx&response_type=code&redirect_uri=http://xxxx/getAccessToken&state=xxxx
4) I will then get routed back to my redirect URL with the authorization code shown in the code argument of the query string, as shown below. (I get a “site can’t be reached” message but that’s to be expected since the Redirect URL is just something I made up since it doesn’t need to actually work for my purposes, since it’s just used for authentication. The Redirect URL would only matter if I were actually developing a web app for end-users.)
How to get Access Token
POST /auth/accessToken request
curl -X POST \
https://[COMMUNITY DOMAIN]/api/2.0/auth/accessToken \
-H "Content-Type: application/json" \
-H "client-id: [CLIENT ID]" \
-d '{
"client_id":"[CLIENT ID]",
"client_secret":"[CLIENT SECRET]",
"grant_type":"authorization_code",
"redirect_uri":"[REDIRECT URI]",
"code":"[AUTHORIZATION CODE]"
}'
POST /auth/accessToken response
{
"response": {
"status": "success",
"message": "OK",
"http_code": 200,
"data": {
"access_token": "o5IV0yIiNDj/5lNJ6doJh08LX6SsDwtkDXDVmhGvRtI=",
"expires_in": 86400,
"lithium_user_id": "2d8c95ed-21dc-4ba6-ab9f-d3eff9c928ce",
"refresh_token": "XAAWIWKr38W33SlqYooR9OEJW0um9DoyB/o843rdIxk=",
"token_type": "bearer"
}
}
}
Refresh the access token
An access token is valid for 24 hours before it expires. Refresh the token within that time period with a POST call to /auth/refreshToken and passing the refresh_token received in the response from POST /auth/accessToken. Otherwise, the user will go through the authentication flow again.
When you pass the refresh_token, the Authorization Service issues a new access token and (optionally) a new refresh token. Store the new refresh token in case you need it for subsequent refreshes. The refresh token does not expire.
Community Link: https://xxxx/api/2.0/auth/refreshToken
{
"client_id":"xxxx",
"client_secret":"xxxxx",
"grant_type":"refresh_token",
"refresh_token":"xxxxx"
}
Hope this helps .....
Please refer below link for details:
https://developer.khoros.com/khoroscommunitydevdocs/docs/oauth-
Thanks & Regards
Sachin Patil
