You should design ' your application to automatically recover from an expired access token by ' (A) Automatically fetch a new access_token using the refresh_token as shown in this example. ' However, refreshing the access_token does NOT require user interaction. ' Usually getting an OAuth2 token for a user requires interactive approval from the user in a browser. This is where your application ' can automatically recover by fetching a new access_token and re-sending the request. ' When the access token expires, your HTTP request will fail with a 401 Unauthorized status response. ' ' 4) IMPORTANT: Quite often, access_token's are only valid for a limited amount of time. ' ' 3) If you don't have a 'refresh_token' in your JSON, some REST API's require 'offline_access' to be included ' in the scope when obtaining the OAuth2 token. It is a JWT (per the OIDC specification) and here is the Chilkat ' example for decoding the id_token. ' It contains information about the user.

' (I've never seen them named differently, although I don't think it's a formal standard.) ' ' 2) The 'id_token' is present if you obtained the OAuth2 authorization token including 'openid' in the scope. ' These members should always be named exactly 'access_token' and 'refresh_token'. ' The important ones for this discussion are 'access_token' and 'refresh_token'. ' An OAuth2 authorization token is typically in JSON format, and looks something like this: ' ' A few notes about the JSON above: ' ' 1) Different OAuth2 implementations (servers) may have different JSON members. ' This example demonstrates how to include the OAuth2 authorization token in HTTP requests (REST API calls).

' See Global Unlock Sample for sample code. ' This example assumes the Chilkat API to have been previously unlocked. (Excel) Using the OAuth2 Authorization Token in REST API Callsĭemonstrates how to use an OAuth2 authorization token in REST API calls after obtaining it.

Excel api vba json