Lua Requires Chilkat v11.0.0+

Rabobank GET /v3/accounts

See more Rabobank Examples

Demonstrates a call to a Rabobank API. Specifically this makes a call to the "Accounts AIS sb" API to deliver all the consented payments accounts for a specific Rabobank customer.

(This includes source code to for signing requests for PSD2 APIs)

Lua

local chilkat = require("chilkat")

-- This example assumes the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

local http = chilkat.Http.new()

-- Implements the following CURL command:

-- curl --request GET \
--   --url https://api-sandbox.rabobank.nl/openapi/sandbox/payments/account-information/ais/v3/accounts \
--   --header 'accept: application/json' \
--   --header 'authorization: Bearer REPLACE_BEARER_TOKEN' \
--   --header 'date: REPLACE_THIS_VALUE' \
--   --header 'digest: REPLACE_THIS_VALUE' \
--   --header 'psu-ip-address: OPTIONAL' \
--   --header 'signature: REPLACE_THIS_VALUE' \
--   --header 'tpp-signature-certificate: MIIDkDCCAnigA ... cwE6gUl0rMA==' \
--   --header 'x-ibm-client-id: Client ID' \
--   --header 'x-request-id: REPLACE_THIS_VALUE'

-- Load the previously fetched OAuth2 access token.
local jsonToken = chilkat.JsonObject.new()
local success = jsonToken:load_file("qa_data/tokens/rabobank.json")
if not success then
    print(jsonToken.last_error_text)
    return
end

-- This adds the "authorization: Bearer REPLACE_BEARER_TOKEN" header.
http.auth_token = jsonToken:string_of("access_token")

-- This is the TTP Signature certificate: The certificate used for signing the request.
local sbTppCert = chilkat.StringBuilder.new()
sbTppCert:append("MIIDkDCCAnigAwIBAgIEWs3AJDANBgkqhkiG9w0BAQsFADCBiTELMAkGA1UEBhMC")
sbTppCert:append("TkwxEDAOBgNVBAgMB1V0cmVjaHQxEDAOBgNVBAcMB1V0cmVjaHQxETAPBgNVBAoM")
sbTppCert:append("CFJhYm9iYW5rMRwwGgYDVQQLDBNPbmxpbmUgVHJhbnNhY3Rpb25zMSUwIwYDVQQD")
sbTppCert:append("DBxQU0QyIEFQSSBQSSBTZXJ2aWNlcyBTYW5kYm94MB4XDTE4MDQxMTA3NTgyOFoX")
sbTppCert:append("DTIzMDQxMTA3NTgyOFowgYkxCzAJBgNVBAYTAk5MMRAwDgYDVQQIDAdVdHJlY2h0")
sbTppCert:append("MRAwDgYDVQQHDAdVdHJlY2h0MREwDwYDVQQKDAhSYWJvYmFuazEcMBoGA1UECwwT")
sbTppCert:append("T25saW5lIFRyYW5zYWN0aW9uczElMCMGA1UEAwwcUFNEMiBBUEkgUEkgU2Vydmlj")
sbTppCert:append("ZXMgU2FuZGJveDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANoAjqGW")
sbTppCert:append("UgCIm2F+0sBSEwLal+T3u+uldLikpxHCB8iL1GD7FrRjcA+MVsxhvHly7vRsHK+t")
sbTppCert:append("QyMSaeK782RHpY33qxPLc8LmoQLb2EuiQxXj9POYkYBQ74qkrZnvKVlR3WoyQWeD")
sbTppCert:append("OXnSY2wbNFfkP8ET4ElwyuIIEriwYhab0OIrnnrO8X82/SPZxHwEd3aQjQ6uhiw8")
sbTppCert:append("paDspJbS5WjEfuwY16KVVUYlhbtAwGjvc6aK0NBm+LH9fMLpAE6gfGZNy0gzMDor")
sbTppCert:append("VNbkQK1IoAGD8p9ZHdB0F3FwkILEjUiQW6nK+/fKDNJ0TBbpgZUpY8bR460qzxKd")
sbTppCert:append("eZ1yPDqX2Cjh6fkCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAYL4iD6noMJAt63kD")
sbTppCert:append("ED4RB2mII/lssvHhcxuDpOm3Ims9urubFWEpvV5TgIBAxy9PBinOdjhO1kGJJnYi")
sbTppCert:append("7F1jv1qnZwTV1JhYbvxv3+vk0jaiu7Ew7G3ASlzruXyMhN6t6jk9MpaWGl5Uw1T+")
sbTppCert:append("gNRUcWQRR44g3ahQRIS/UHkaV+vcpOa8j186/1X0ULHfbcVQk4LMmJeXqNs8sBAU")
sbTppCert:append("dKU/c6ssvj8jfJ4SfrurcBhY5UBTOdQOXTPY85aU3iFloerx7Oi9EHewxInOrU5X")
sbTppCert:append("zqqTz2AQPXezexVeAQxP27lzqCmYC7CFiam6QBr06VebkmnPLfs76n8CDc1cwE6g")
sbTppCert:append("Ul0rMA==")
http:set_request_header("tpp-signature-certificate", sbTppCert:get_as_string())

-- ----------------------------------------------------------------
-- We're not going to add the psu-ip-address header in this example.

-- ----------------------------------------------------------------
-- X-Request-ID header...
-- Generate a UUID v4.
local crypt = chilkat.Crypt2.new()
local xRequestId = crypt:generate_uuid()
http:set_request_header("x-request-id", xRequestId)

-- ----------------------------------------------------------------
-- Date header...
local dt = chilkat.DateTime.new()
dt:set_from_current_system_time()
local dateHdrVal = dt:get_as_rfc822(false)
-- The desire date/time format is the "RFC822" format.
http:set_request_header("Date", dateHdrVal)

-- ----------------------------------------------------------------
-- Digest header...
crypt.hash_algorithm = "SHA256"
crypt.encoding_mode = "base64"
-- A GET request has no HTTP request body.  Therefore the payload is the empty string.
local payload = ""
local payloadDigest = crypt:hash_string_enc(payload)
local sbDigestHdrVal = chilkat.StringBuilder.new()
sbDigestHdrVal:append("SHA-256=")
sbDigestHdrVal:append(payloadDigest)
http:set_request_header("digest", sbDigestHdrVal:get_as_string())

-- ----------------------------------------------------------------
-- The HTTP request needs to be signed for PSD2 API's...
-- Create the signing string (to use in signing the HTTP request).
-- See https://developer.rabobank.nl/signing-requests-psd2-apis
--
-- For "account information" HTTP requests, we must use the following headers in the signing string.
--    date
--    digest
--    x-request-id

local sbStringToSign = chilkat.StringBuilder.new()
sbStringToSign:append("date: ")
sbStringToSign:append_line(dateHdrVal, false)
sbStringToSign:append("digest: ")
sbStringToSign:append_line(sbDigestHdrVal:get_as_string(), false)
sbStringToSign:append("x-request-id: ")
sbStringToSign:append(xRequestId)

-- ----------------------------------------------------------------
-- Sign with our private key...
local sbPrivKey = chilkat.StringBuilder.new()
sbPrivKey:append("MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDaAI6hllIAiJth")
sbPrivKey:append("ftLAUhMC2pfk97vrpXS4pKcRwgfIi9Rg+xa0Y3APjFbMYbx5cu70bByvrUMjEmni")
sbPrivKey:append("u/NkR6WN96sTy3PC5qEC29hLokMV4/TzmJGAUO+KpK2Z7ylZUd1qMkFngzl50mNs")
sbPrivKey:append("GzRX5D/BE+BJcMriCBK4sGIWm9DiK556zvF/Nv0j2cR8BHd2kI0OroYsPKWg7KSW")
sbPrivKey:append("0uVoxH7sGNeilVVGJYW7QMBo73OmitDQZvix/XzC6QBOoHxmTctIMzA6K1TW5ECt")
sbPrivKey:append("SKABg/KfWR3QdBdxcJCCxI1IkFupyvv3ygzSdEwW6YGVKWPG0eOtKs8SnXmdcjw6")
sbPrivKey:append("l9go4en5AgMBAAECggEAB8nsTqalwGIhFw8mbXuhNUFlGuek/arYLD6pv28swwQH")
sbPrivKey:append("7v0ZlxFUcCHF+iBl0PsDwZTZQ4ePtgGS6ehoLkWHCzb1lEv5E1YVG5qKNE2UUwRl")
sbPrivKey:append("fIyPakO6AzyV/UF3uzq7C+/GuXGNTKZxKewg5yD/DCFvKoCOpxu9u36FyqP/hw0S")
sbPrivKey:append("ADVlmp35/zoPDPZzu1j4FiCo0pJ9LwJcHxeJHopNAKDw9k6I4z/grskdgupsGzK2")
sbPrivKey:append("BiGiQ/+wmmO68/6Xa6KWfpr1PQ6ODJHgzZsdGCVi6Ebaqlj6BbsYWxP6h3lrsGt+")
sbPrivKey:append("LmHBaN2jCD6cDp+lihqFgnm8hfdv0lmbPilp71EDfwKBgQD6U8PBzZtN8yXm5WuS")
sbPrivKey:append("NL+/8q5GjNmeTJBSo1gM6Y8vOT4QAE147LbVuVBDwyHPoSrNejePae6Q14PswjBy")
sbPrivKey:append("T7B8DZ0OeQyGa3trrFg/ib7Vv4ZMvJqX9+WzBrzZsxTg7oCKHzmCR4vIRItKHH3z")
sbPrivKey:append("Wnnhqlo8ic2AZ2O43cdJosbO1wKBgQDe8UODOLu0vnHohOKeUqF3w/ZOB2+83/js")
sbPrivKey:append("YyUbSkzsGvHIwTjObuMUFTQvdMZ6IkIyJdfnDZIbvlBSD8tzL5iKFTNCK2nL1i4G")
sbPrivKey:append("iFr0CYLaHAlhJ5GEbTrTMDoJeBPerZq83HPrSa/Wb0xO18QTWsoVQPFfPFbbcQyI")
sbPrivKey:append("9ryJ2iIDrwKBgQC6kuAefG46ZPVk6K2KZUJdgDUgZC52a75NuW0RAqszmUiGiJM1")
sbPrivKey:append("g8ip9tq6BqAWrprGV0c93shusBKlzf5p1LdHXqYmeVY6gbWVhPipMrNHgN5KJ3BZ")
sbPrivKey:append("v+w1yNnMsErpcxne2HL2hPjMJTpj3GSLkm2xIlTrNhIyl9ydlr7IRUhENQKBgQCv")
sbPrivKey:append("i6HxbXa/90WSJTCcIcxqla8X+dsOCf3jhJ3vQy4Wq5C+1wZ35fCAG8Ifq/+so9Uj")
sbPrivKey:append("z5CVqqXlmpF8TFuSs2OVNuRJsg14J4nOMwgLKIIUZAcurQ10DN5I9Kx+UEK1EFXL")
sbPrivKey:append("aHsORdNjMfgQDO2jn9WHrr9gkg6CdB2+qyoCEfS+mQKBgBW08lcy9V5RzRWb/v/j")
sbPrivKey:append("xsc7ovmgAhCJhDeV7dPbx4HbFeoQJlbA8g1thdcFlcatSGyNDbvNE1GPSd4NhkpR")
sbPrivKey:append("Y6Hfv53kdEzjVkEtU8lUdL7HNVJqX7bU7oZlfbYcwxWQ1Gg8C1oLIAyEt71slQtd")
sbPrivKey:append("RiNYBRZTQe2F0wxbXnuUqLAw")

local privKey = chilkat.PrivateKey.new()
success = privKey:load_pem(sbPrivKey:get_as_string())
if not success then
    print(privKey.last_error_text)
    return
end

local rsa = chilkat.Rsa.new()
success = rsa:use_private_key(privKey)
if not success then
    print(rsa.last_error_text)
    return
end

rsa.encoding_mode = "base64"
local b64Signature = rsa:sign_string_enc(sbStringToSign:get_as_string(), "SHA256")

-- ----------------------------------------------------------------
-- Add the "signature" header.
--
-- The signature header will look like this:
-- signature: keyId="1523433508",algorithm="rsa-sha512",headers="date digest x-request-id",signature="y5o7gKxmfA6AT6...blE1A9Q=="
--
-- The keyId is the serial number of the certificate as defined in 'TPP-Signing-Certificate' header, the format should be Integer not hex.
local cert = chilkat.Cert.new()
success = cert:set_from_encoded(sbTppCert:get_as_string())
if not success then
    print(cert.last_error_text)
    return
end

local sbSigHdrVal = chilkat.StringBuilder.new()
sbSigHdrVal:append("keyId=\"")
sbSigHdrVal:append(cert.serial_decimal)
sbSigHdrVal:append("\",")
sbSigHdrVal:append("algorithm=\"rsa-sha256\",")
sbSigHdrVal:append("headers=\"date digest x-request-id\",")
sbSigHdrVal:append("signature=\"")
sbSigHdrVal:append(b64Signature)
sbSigHdrVal:append("\"")

http:set_request_header("signature", sbSigHdrVal:get_as_string())

-- ----------------------------------------------------------------
-- Add remaining headers...

http:set_request_header("x-ibm-client-id", "YOUR_APP_CLIENT_ID")
http:set_request_header("accept", "application/json")

-- ----------------------------------------------------------------
-- Add our certificate and key for mutual TLS
-- (provide a registered X509 client certificate during TLS handhake)

local tlsCert = chilkat.Cert.new()
success = tlsCert:load_from_file("qa_data/certs_and_keys/ING/example_client_tls.cer")
if not success then
    print(tlsCert.last_error_text)
    return
end

local bdPrivKey = chilkat.BinData.new()
success = bdPrivKey:load_file("qa_data/certs_and_keys/ING/example_client_tls.key")
if not success then
    print("Failed to load example_client_tls.key")
    return
end

-- The OAuth 2.0 client_id for these certificates is e77d776b-90af-4684-bebc-521e5b2614dd.
-- Please note down this client_id since you will need it in the next steps to call the API.

local tlsPrivKey = chilkat.PrivateKey.new()
success = tlsPrivKey:load_any_format(bdPrivKey, "")
if not success then
    print(tlsPrivKey.last_error_text)
    return
end

-- Associate the private key with the certificate.
success = tlsCert:set_private_key(tlsPrivKey)
if not success then
    print(tlsCert.last_error_text)
    return
end

success = http:set_ssl_client_cert(tlsCert)
if not success then
    print(http.last_error_text)
    return
end

-- ----------------------------------------------------------------
-- Finally, send the request...

local sbResponseBody = chilkat.StringBuilder.new()
success = http:quick_get_sb("https://api-sandbox.rabobank.nl/openapi/sandbox/payments/account-information/ais/v3/accounts", sbResponseBody)
if not success then
    print(http.last_error_text)
    print(sbResponseBody:get_as_string())
    return
end

local jResp = chilkat.JsonObject.new()
jResp:load_sb(sbResponseBody)
jResp.emit_compact = false

print("Response Body:")
print(jResp:emit())

local respStatusCode = http.last_status
print("Response Status Code = " .. respStatusCode)
if respStatusCode >= 400 then
    print("Response Header:")
    print(http.last_header)
    print("Failed.")
    return
end

-- Sample JSON response:
-- (Sample code for parsing the JSON response is shown below)

-- {
--   "accounts": [
--     {
--       "_links": {
--         "account": "/v3/accounts/dW9od2VIVUhGVypIZHVpaGRhdWR3OGRoY",
--         "balances": "/v3/accounts/dW9od2VIVUhGVypIZHVpaGRhdWR3OGRoY/balances",
--         "transactions": "/v3/accounts/dW9od2VIVUhGVypIZHVpaGRhdWR3OGRoY/transactions"
--       },
--       "currency": "EUR",
--       "iban": "NL05RABO0812836782",
--       "name": "Rosie Roy",
--       "resourceId": "dW9od2VIVUhGVypIZHVpaGRhdWR3OGRoY",
--       "status": "enabled"
--     }
--   ]
-- }

-- Sample code for parsing the JSON response...
-- Use the following online tool to generate parsing code from sample JSON:
-- Generate Parsing Code from JSON

local v_linksAccount = ""
local v_linksBalances = ""
local v_linksTransactions = ""
local currency = ""
local iban = ""
local name = ""
local resourceId = ""
local status = ""

local i = 0
local count_i = jResp:size_of_array("accounts")
while i < count_i do
    jResp.i = i
    v_linksAccount = jResp:string_of("accounts[i]._links.account")
    v_linksBalances = jResp:string_of("accounts[i]._links.balances")
    v_linksTransactions = jResp:string_of("accounts[i]._links.transactions")
    currency = jResp:string_of("accounts[i].currency")
    iban = jResp:string_of("accounts[i].iban")
    name = jResp:string_of("accounts[i].name")
    resourceId = jResp:string_of("accounts[i].resourceId")
    status = jResp:string_of("accounts[i].status")
    i = i + 1
end