oAuth2 authentication – </> xscores developer

To use our oAuth2 authentication server, you have to authenticate with your backend, save the token, and then use it with your javascript frontend code.

<?php
    define("USERNAME", "username");
    define("PASSWORD", "password");
    define("CLIENT_ID", "client-id");
    define("CLIENT_SECRET", "client-secret");
    define("ACCESS_TOKEN_ENDPOINT", "https://auth-stg.xscores.com/auth_application/oauth/token");
    $curl = curl_init();
    $params = array(
        CURLOPT_URL =>  ACCESS_TOKEN_ENDPOINT."?"
                        ."&username=". USERNAME
                        ."&password=". PASSWORD
                        ."&grant_type=password"
                        ."&client_id=". CLIENT_ID
                        ."&client_secret=". CLIENT_SECRET,
                        CURLOPT_RETURNTRANSFER => true,
                        CURLOPT_MAXREDIRS => 10,
                        CURLOPT_TIMEOUT => 30,
                        CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
                        CURLOPT_CUSTOMREQUEST => "POST",
                        CURLOPT_NOBODY => false, 
                        CURLOPT_HTTPHEADER => array(
                        "cache-control: no-cache",
                        "content-type: application/x-www-form-urlencoded",
                        "accept: *",
        ),
      );
      curl_setopt_array($curl, $params);
      $response = curl_exec($curl);
      $err = curl_error($curl);
      $access_token = "";
      curl_close($curl);
      if ($err) {
        echo "cURL Error: " . $err;
      } else {
        $response = json_decode($response, true);    
        if(array_key_exists("access_token", $response)) $access_token = $response["access_token"];
      }
      echo $access_token;
  ?>

<%@ page import="java.net.URL" %>
<%@ page import="java.io.InputStreamReader" %>
<%@ page import="java.util.*" %>
<%@ page import="java.net.URLEncoder" %>
<%@ page import="java.net.HttpURLConnection" %>
<%@ page import="java.io.Reader" %>
<%@ page import="java.io.BufferedReader" %>
<%@ page import="org.json.simple.parser.JSONParser" %>
<%@ page import="org.json.simple.JSONObject" %>

<%
URL url = new URL("https://auth-stg.xscores.com/auth_application/oauth/token");
Map<String,Object> params = new LinkedHashMap<>();
params.put("grant_type", "password");
params.put("client_id", "xscores-app");
params.put("client_secret", "secret");
params.put("username", <your username>);
params.put("password", <your password>);
StringBuilder postData = new StringBuilder();
for (Map.Entry<String,Object> param : params.entrySet()) {
    if (postData.length() != 0) postData.append('&');
    postData.append(URLEncoder.encode(param.getKey(), "UTF-8"));
    postData.append('=');
    postData.append(URLEncoder.encode(String.valueOf(param.getValue()), "UTF-8"));
}
byte[] postDataBytes = postData.toString().getBytes("UTF-8");
try {
    HttpURLConnection conn = (HttpURLConnection) url.openConnection();
    conn.setRequestMethod("POST");
    conn.setRequestProperty("Content-Type", "application/x-www-form-urlencoded");
    conn.setRequestProperty("Content-Length", String.valueOf(postDataBytes.length));
    conn.setDoOutput(true);
    conn.getOutputStream().write(postDataBytes);
    Reader in = new BufferedReader(new InputStreamReader(conn.getInputStream(), "UTF-8"));
    StringBuilder sb = new StringBuilder();
    for (int c; (c = in.read()) >= 0; )
        sb.append((char) c);
    String responseJson = sb.toString();
    JSONParser parser = new JSONParser();
    JSONObject json = (JSONObject) parser.parse(responseJson);
    String access_token=json.get("access_token").toString();
}catch(Exception e){
    System.out.println("AUTH SERVER ERROR!");
    System.out.println(e);
}
%>
<html>
<head>
    <title>Title</title>
</head>
<body>
Access Token: <%=access_token%>
</body>
</html>

oAuth2 Return

oAuth2 will return:
access_token : required for all JSON calls
token_type: read/write
refresh_token: The refresh token
expires_in: When will the token expire (in ms)
scope
jti