259
When using the SmartCloud for Social Business Toolkit, the OAuth 2.0 token is available for use for up to 90 days. Be mindful that this is the refresh token - not the access token. The access token that you use to make the API call will expire in two hours; you'll receive the expires_in header (2 hours represented in milliseconds) returned when you initially request the access token. Once the two hours elapses, you should then use the refresh token to obtain a new access token. Example PHP code to do so is below. One note is that while the wiki states you can use headers to obtain a new token, I've found that only the URL parameters approach is successful. But as is always the case, YMMV.
function validateAccessToken($accessToken, $refreshToken, $expiration){
// assumes the expiration is in millliseconds
if(time()*1000 >= $expiration){
syslog(LOG_INFO, 'Refreshing access_token using refresh token ' . $refreshToken);
$refreshParams = '?client_secret=' . urlencode($GLOBALS['clientSecret']) . '&client_id=' . urlencode($GLOBALS['clientId']) . '&grant_type=refresh_token&refresh_token=' . urlencode($refreshToken);
$ch = curl_init($GLOBALS['sc4sbUrlToken'] . $refreshParams);
curl_setopt_array($ch, $GLOBALS['options']);
// if the result if false, check curl_error($ch);
$result = curl_exec($ch);
// If the request is successful, the following parameters are returned in the body of the response with an HTTP response code of 200:
// refresh_token, access_token, issued_on, expires_in, token_type
$header_size = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
$body = substr($result, $header_size);
if(!$result){
syslog(LOG_ERR, 'Failed Step 5');
syslog(LOG_ERR, 'Authorization server returned ' . $body);
}
parse_str($body);
curl_close($ch);
syslog(LOG_INFO, 'Obtained new access_token ' . $access_token);
return $access_token;
} else {
syslog(LOG_INFO, 'Existing access_token still valid ' . $accessToken);
// no need to refresh
return $accessToken;
}
}
