QBO-Concepts-Tutorial-Java

The Intuit Developer team has written this starter app in Java using OAuth2.0 to provide working examples of OAuth 2.0 concepts, and how to integrate with Intuit endpoints.

Table of Contents

Requirements
First Use Instructions
Running the code
Configuring the callback endpoint
Getting the OAuth Tokens
Scope
Storing the Tokens

Requirements

In order to successfully run this sample app you need a few things:

Java 1.8
A developer.intuit.com account
An app on developer.intuit.com and the associated client id and client secret.

First Use Instructions

Clone the GitHub repo to your computer
Fill in the application.properties file values (OAuth2AppClientId, OAuth2AppClientSecret) by copying over from the keys section for your app.

Running the code

Once the sample app code is on your computer, you can do the following steps to run the app:

cd to the project directory
Run the command:./gradlew bootRun (Mac OS) or gradlew.bat bootRun (Windows)
Wait until the terminal output displays the "Started Application in xxx seconds" message.
Your app should be up now in http://localhost:8080/
The oauth2 callback endpoint in the sample app is http://localhost:8080/oauth2redirect
To run the code on a different port, uncomment and update server.port property in application.properties. Also make sure to update the url in application.properties and in the Developer portal ("Keys" section).

Configuring the callback endpoint

You'll have to set a Redirect URI in the Developer Portal ("Keys" section). With this app, the typical value would be http://localhost:8080/oauth2redirect, unless you host this sample app in a different way (if you were testing HTTPS, for example).

Note: Using localhost and http will only work when developing, using the sandbox credentials. Once you use production credentials, you'll need to host your app over https.

Getting the OAuth Tokens

The sample app supports the following flows:

Connect To QuickBooks - this flow requests non-OpenID scopes. You will be able to make a QuickBooks API sample call (using the OAuth2 token) on the /connected landing page.

Get CompanyInfor API - This flow can be triggered from the connected page. It queries the QuickBooks CompanyInfo API and retrieves the response.

Scope

It is important to ensure that the scopes your are requesting match the scopes allowed on the Developer Portal. For this sample app to work by default, your app on Developer Portal must support Accounting scopes. If you'd like to support both Accounting and Payment, simply add thecom.intuit.quickbooks.payment scope in the application.properties file connectToQuickbooks method.

Storing the tokens

This app stores all the tokens and user information in the session. For production ready app, tokens should be encrypted and stored in a database.