SSL Reddit Mentions | ChartExchange

**auth.php**
This is the main file to manually grab and store your token for use, store it in the same folder as env.php (ie /scripts). NOTE: The full path should also be whitelisted in your app, ie: [https://www.yourdomain.com/scripts/auth.php](https://www.yourdomain.com/scripts/auth.php)
<?
ini_set('display_errors', 1);
require_once __DIR__ . '/env.php';

$appKey = schwabEnv('SCHWAB_APP_KEY');
$client_secret = schwabEnv('SCHWAB_CLIENT_SECRET');

if (!$appKey || !$client_secret) {
die('Missing Schwab credentials in .env file');
}

$key = base64_encode($appKey.':'.$client_secret);
$auth_header = "Authorization: Basic {$key}";
$thisPage = "https://$_SERVER[HTTP_HOST]$_SERVER[PHP_SELF]";
$tokenURL = "https://api.schwabapi.com/v1/oauth/token";
$redirectUri = urlencode($thisPage);
$currentDate = new DateTime();
$filePath = '/home/yourhost/private/trading/tokens.json';
$expired_refresh = false;
$expired_access = false;

if(file_exists($filePath)) {
echo("File Exists<br><br>");
$handle = fopen($filePath, 'r');
$content = fread($handle, filesize($filePath));
fclose($handle);

$data = json_decode($content, true);
echo("<pre>");
print_r($data);
echo("</pre>");

if(!$data["results"]){
$expired_refresh = true;
}elseif(array_key_exists("error",$data["results"])){
$expired_refresh = true;
}else{
$refresh = $data["results"]['refresh_token']??"";
$access = $data["results"]['access_token']??"";
}

$refreshExp = $data['refreshExp'];
$accessExp = $data['accessExp'];

$checkRefresh = new DateTime();
$checkRefresh->setTimestamp($refreshExp);
$checkAccess = new DateTime();
$checkAccess->setTimestamp($accessExp);

if($currentDate>$checkRefresh){
$expired_refresh = true;
}
if($currentDate>$checkAccess){
$expired_access = true;
}

$intervalRefresh = $currentDate->diff($checkRefresh);
$intervalAccess = $currentDate->diff($checkAccess);
$minutes = ($intervalAccess->days * 24 * 60) + ($intervalAccess->h * 60) + $intervalAccess->i;
?>
<p>Current:<? echo($currentDate->format('Y-m-d H:i:s')); ?></p>
<p>Refresh Expires:<? echo($checkRefresh->format('Y-m-d H:i:s')); ?> [<? echo($intervalRefresh->format('%R%a days')); ?>]</p>
<?
if($expired_refresh){
?>
<p>Refresh Expired!</p>
<?
}else{
?>
<p>Refresh Active!</p>
<?
}
?>
<p>Access Expires:<? echo($checkAccess->format('Y-m-d H:i:s')); ?> [<? echo($minutes.' minutes'); ?>]</p>
<?
if($expired_access){
?>
<p>Access Expired!</p>
<?
}else{
?>
<p>Access Active!</p>
<?
}
?>
<?
}

$authUrl = "https://api.schwabapi.com/v1/oauth/authorize?client_id={$appKey}&redirect_uri={$redirectUri}";

if($expired_refresh){
if(isset($_GET['code'])&&$_GET['code']<>""){
$code = $_GET['code'];
}else{
?>
<h1>Token has expired</h1>
<a href="<? echo($authUrl); ?>" target="_blank">Open in New Window</a><br><br>
<form id="pull-gex" enctype="multipart/form-data" method="get">
<label name="Code Input">Code</th>
<input class="stock-text-box" type="code" name="code"></td>
<input class="stock-form-submit" type="submit"></td>
</form>
<?
exit;
}
$code = urldecode($code);
$headers = array(
$auth_header,
"Content-Type: application/x-www-form-urlencoded"
);
$postfields = "grant_type=authorization_code&code=".$code."&redirect_uri=".$redirectUri;
$curl = curl_init();
curl_setopt_array($curl, array(
CURLOPT_URL => $tokenURL,
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => '',
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_FOLLOWLOCATION => true,
CURLOPT_CUSTOMREQUEST => 'POST',
CURLOPT_POSTFIELDS => $postfields,
CURLOPT_HTTPHEADER => $headers,
CURLOPT_USERAGENT => 'Mozilla/5.0 (compatible; SchwabAPI-Client/1.0)',
CURLOPT_SSL_VERIFYPEER => true,
CURLOPT_SSL_VERIFYHOST => 2,
CURLOPT_SSLVERSION => CURL_SSLVERSION_TLSv1_2
));
$response = curl_exec($curl);
echo("RESPONSE:".$response);
curl_close($curl);
if(curl_errno($curl)){
echo 'Error:'.curl_errno($curl);
}else{
$data = json_decode($response,true);
echo("Expired Refresh Output:<br><pre>");
print_r($data);
echo("</pre>");
if(isset($data['error'])){
echo 'Error:'.$data['error'];
}else{
$time = $_SERVER['REQUEST_TIME'];
$expire_in = 1200;
if($data){
$expire_in = $data['expires_in'];
}
$extra_data = [
"refresh_token_expires_at" => $time + 86400 * 7,
"access_token_expires_at" => $time + $expire_in,
];
$writeData = [
'refreshExp' => $extra_data["refresh_token_expires_at"],
'accessExp' => $extra_data["access_token_expires_at"],
'results' => $data
];
$jsonData = json_encode($writeData, JSON_PRETTY_PRINT);
if(file_put_contents($filePath, $jsonData)){
echo "JSON data successfully written to {$filePath}";
}else{
echo "Error writing JSON data to {$filePath}";
}
}
}
}else if($expired_access){
$headers = array(
$auth_header,
"Content-Type: application/x-www-form-urlencoded"
);
$jsonBody = [
"grant_type" => "refresh_token",
"refresh_token" => $refresh
];
$jsonArray = http_build_query($jsonBody);
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => $tokenURL,
CURLOPT_RETURNTRANSFER => true,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => $jsonArray,
CURLOPT_HTTPHEADER => $headers,
CURLOPT_TIMEOUT => 30,
CURLOPT_USERAGENT => 'Mozilla/5.0 (compatible; SchwabAPI-Client/1.0)',
CURLOPT_SSL_VERIFYPEER => true,
CURLOPT_SSL_VERIFYHOST => 2,
CURLOPT_SSLVERSION => CURL_SSLVERSION_TLSv1_2
]);
$response = json_decode(curl_exec($curl),true);
echo("Expired Access Output:<br><pre>");
print_r($response);
echo("</pre>");
$err = curl_error($curl);
if ($err) {
echo "cURL Error #:" . $err;
}else{
$time = $_SERVER['REQUEST_TIME'];
$extra_data = [
"refresh_token_expires_at" => $time + 86400 * 7,
"access_token_expires_at" => $time + ($response['expires_in']??-1000000),
];
$writeData = [
'refreshExp' => $extra_data["refresh_token_expires_at"],
'accessExp' => $extra_data["access_token_expires_at"],
'lastRefresh' => $time,
'results' => $response
];
$jsonData = json_encode($writeData, JSON_PRETTY_PRINT);
if(file_put_contents($filePath, $jsonData)){
echo "JSON data successfully written to {$filePath}";
}else{
echo "Error writing JSON data to {$filePath}";
}
}
}else{

?>
<h1>Force Refresh Token</h1>
<a href="<? echo($authUrl); ?>" target="_blank">Open in New Window</a><br><br>
<form id="pull-gex" enctype="multipart/form-data" method="get">
<label name="Code Input">Code</th>
<input class="stock-text-box" type="code" name="code"></td>
<input class="stock-form-submit" type="submit"></td>
</form>
<?
}

?>

document.getElementById("jghr4S").onerror = function(){this.style.display='none';}; .dark-mode .Ry32Bq{ color: white; background-color: #333333; border: 2px solid white; }.light-mode .Ry32Bq{ color: #333333; background-color: white; border: 2px solid #333333; }SSLSasol Limitedstock NYSE ADR

SSL
Sasol Limited
stock NYSE ADR