How to authenticate my Citrix app with PHP without user input?

Question

I want to register users to my webinars after they submit a form in my site, this is common practice but I'm having problems authenticating my application.

The problem is that according to the documentation Citrix doesn't support username-password authentication flow (where you put your user and pass in a request and you get a token): https://developer.citrixonline.com/content/username-password-flow

Instead users need to be directed to a login page to complete their Citrix account credentials, supposedly this can be done by me just once and then save the token, however I couldn't find a method to do it safely, I tried once to save the token and just the next day it was expired. So how can I make sure I get a fresh access token without

I'm using this PHP library which is supposed to simplify the login process (maybe there is some clue in it): https://github.com/jakir-hayder/Citrix-GoToWebinar-PHP-Library

Answer 1

First, read this primer on OAuth workflow to ensure you have the terms and concepts down pat. (You can ignore the fact that the example is for SalesForce -- OAuth is all the same.)

Then, you should understand that you're looking for the Citrix Token Request Endpoint, which they happen to call "Direct Login".

That should let you pass the username/password to get the token to use in subsequent requests. That what you need?

Answer 2

I would use Fiddler or Wireshark to collect the API calls that are made to the Citrix API when you log in. Then add some code in your applicaiton to send the same requests, parse the response that has the access token, and dynamically use that token however you've already got it set up in your application.