Working API Request to refresh access token

kgOrdersServer/Source/qbAPI.pas

@@ -10,7 +10,8 @@ uses
   System.Generics.Collections, AdvEdit, vcl.wwdblook, vcl.wwdbdatetimepicker,
   System.Hash, Api.Database, Vcl.ExtCtrls, WEBLib.Forms, WEBLib.Controls, WEBLib.StdCtrls,
   WEBLib.ExtCtrls, WEBLib.REST, WEBLib.WebTools,System.Net.HttpClient,
-  System.Net.URLClient, System.Net.HttpClientComponent, System.netencoding;
+  System.Net.URLClient, System.Net.HttpClientComponent, System.netencoding,
+  IdHTTP, IdSSLOpenSSL, IdSSLOpenSSLHeaders;
 
 
 type
@@ -25,6 +26,9 @@ type
     { Public declarations }
     procedure getCompanyInfo();
     procedure getAccessToken();
+    procedure getToken();
+    //procedure forceModernTLS();
+    procedure ConfigureSSL(IOHandler: TIdSSLIOHandlerSocketOpenSSL);
     //function refreshAccessToken(): boolean;
   end;
 
@@ -37,11 +41,80 @@ implementation
 
 procedure TfQB.Button1Click(Sender: TObject);
 begin
-  getAccessToken();
+  //getAccessToken();
   //getCompanyInfo();
+  getToken()
 end;
 
+procedure TfQB.ConfigureSSL(IOHandler: TIdSSLIOHandlerSocketOpenSSL);
+begin
+  // For Indy 10.6.2+ (Delphi 10.2 Tokyo+)
+  IOHandler.SSLOptions.Method := sslvTLSv1_2;
+
+  // Set SSL versions - maximum compatibility
+  IOHandler.SSLOptions.SSLVersions := [sslvTLSv1_2];
+
+  // For very old Indy versions (fallback)
+  if not (sslvTLSv1_2 in IOHandler.SSLOptions.SSLVersions) then
+  begin
+    IOHandler.SSLOptions.Method := sslvSSLv23;
+    IOHandler.SSLOptions.SSLVersions := [sslvTLSv1, sslvTLSv1_1, sslvTLSv1_2];
+  end;
 
+  IOHandler.SSLOptions.Mode := sslmClient;
+end;
+
+procedure TfQB.GetToken;
+var
+  IdHTTP: TIdHTTP;
+  SSLIO: TIdSSLIOHandlerSocketOpenSSL;
+  RequestStream: TStringStream;
+  EncodedAuth, PostData: string;
+begin
+  // 1. Encode credentials (same as working Postman request)
+  EncodedAuth := 'QUJnTzE0dXZqaDhYcUx1ZDdzcFE4bGtiOThBVXBjZEE3SGJ5TUpmQ0F0bDY1c1E1eXk6YlEwNlRSZW1IZUFHRnpWSFJhVFV2VW9CVTlqcFU5aXRLNk1PTWdxTg==';
+
+  // 2. Prepare POST data (EXACTLY as in Postman)
+  PostData := 'grant_type=refresh_token&refresh_token=AB11751554594LX59YtRB69e6vWUjg56d9zCWjOOUisSTd6VfC';
+
+  // 3. Configure HTTP client
+  IdHTTP := TIdHTTP.Create(nil);
+  SSLIO := TIdSSLIOHandlerSocketOpenSSL.Create(nil);
+  try
+    // Force TLS 1.2
+    SSLIO.SSLOptions.Method := sslvTLSv1_2;
+    SSLIO.SSLOptions.SSLVersions := [sslvTLSv1_2];
+    IdHTTP.IOHandler := SSLIO;
+
+    // Set headers (EXACT match with Postman)
+    IdHTTP.Request.ContentType := 'application/x-www-form-urlencoded';
+    IdHTTP.Request.Accept := 'application/json';
+    IdHTTP.Request.CustomHeaders.AddValue('Authorization', 'Basic ' + EncodedAuth);
+
+    // 4. Create and send request
+    RequestStream := TStringStream.Create(PostData, TEncoding.UTF8);
+    try
+      Memo1.Lines.Add('Sending request...');
+      Memo1.Lines.Add('URL: https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer');
+      Memo1.Lines.Add('Headers:');
+      Memo1.Lines.Add('Authorization: Basic ' + EncodedAuth);
+      Memo1.Lines.Add('Body: ' + PostData);
+
+      // Execute POST
+      try
+        Memo1.Lines.Add(IdHTTP.Post('https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer', RequestStream));
+      except
+        on E: EIdHTTPProtocolException do
+          Memo1.Lines.Add('Error: ' + E.Message + #13#10 + 'Response: ' + E.ErrorMessage);
+      end;
+    finally
+      RequestStream.Free;
+    end;
+  finally
+    SSLIO.Free;
+    IdHTTP.Free;
+  end;
+end;
 
 procedure TfQB.getAccessToken();
 var
@@ -62,6 +135,7 @@ var
   companyID, client, secret: string;
   pair: TJSONPair;
   item: TRestRequestParameter;
+  postBodyStr: string;
 begin
   client := 'ABgO14uvjh8XqLud7spQ8lkb98AUpcdA7HbyMJfCAtl65sQ5yy';
   secret := 'bQ06TRemHeAGFzVHRaTUvUoBU9jpU9itK6MOMgqN';
@@ -72,44 +146,43 @@ begin
   // Prepare the REST client and request
   restClient := TRESTClient.Create(nil);
   restRequest := TRESTRequest.Create(nil);
-  restRequest.Client := restClient;
   restResponse := TRESTResponse.Create(nil);
+  restRequest.Client := restClient;
   restRequest.Response := restResponse;
 
   restClient.BaseURL := 'https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer';
 
+  // Set request method to POST
   restRequest.Method := rmPOST;
 
-  // Add Content-Type and Accept headers
-  restClient.Accept := 'application/json';
-  restClient.ContentType := 'application/x-www-form-urlencoded';
-  //restClient.RaiseExceptionOn500 := false;
-
+  // Set Content-Type and Accept headers
   restRequest.Params.Clear;
-  Memo1.Lines.add(restRequest.ContentType);
-  param := restRequest.Params.AddItem;
-  param.Name := 'Authorization';
-  param.Kind := pkHTTPHEADER;
-  param.Options := param.Options + [TRESTRequestParameterOption.poDoNotEncode];
-  param.Value := 'Basic ' + EncodedAuth;
-  //restRequest.Params.AddHeader('Authorization', 'Basic ' + EncodedAuth);
 
-  restRequest.Params.AddItem('grant_type', 'refresh_token');
-  restRequest.Params.AddItem('refresh_token', RefreshToken);
+  postBodyStr := 'grant_type=refresh_token&' + #13#10 +
+               'refresh_token=' + RefreshToken;
 
-  for item in restRequest.Params do
-    Memo1.Lines.Add(item.Name + ':' + item.Value);
-  restRequest.Method := rmPOST;
+  restRequest.Params.AddHeader('Authorization', 'Basic QUJnTzE0dXZqaDhYcUx1ZDdzcFE4bGtiOThBVXBjZEE3SGJ5TUpmQ0F0bDY1c1E1eXk6YlEwNlRSZW1IZUFHRnpWSFJhVFV2VW9CVTlqcFU5aXRLNk1PTWdxTg==');
+  restRequest.Params.AddHeader('Content-Type', 'application/x-www-form-urlencoded');
+  restRequest.params.AddHeader('Accept', 'application/json');
 
+  // Set the body with the properly formatted form data
+  restRequest.AddBody(postBodyStr, TRESTContentType.ctAPPLICATION_X_WWW_FORM_URLENCODED);
 
-  restRequest.Execute;
+  // Execute the request
+  try
+    restRequest.Execute;
 
-  //Memo1.Lines.Add(restRequest.Response.Content);
+    // Optionally log the response to the memo for debugging
+    Memo1.Lines.Add('Response: ' + restResponse.Content);
+  except
+    on E: Exception do
+      Memo1.Lines.Add('Error: ' + E.Message);
+  end;
 
+  // Free resources
   restClient.Free;
   restRequest.Free;
   restResponse.Free;
-
 end;
 
 procedure TfQB.getCompanyInfo();

kgOrdersServer/kgOrdersServer.ini

 [Settings]
 MemoLogLevel=4
 FileLogLevel=5
-LogFileNum=372
+LogFileNum=385
 webClientVersion=1.0.0
 
 [Database]