Swift
Swift
Rabobank GET /v3/accounts
See more Rabobank Examples
Demonstrates a call to a Rabobank API. Specifically this makes a call to the "Accounts AIS sb" API to deliver all the consented payments accounts for a specific Rabobank customer.(This includes source code to for signing requests for PSD2 APIs)
Chilkat Swift Downloads
func chilkatTest() {
var success: Bool = false
// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.
let http = CkoHttp()!
// Implements the following CURL command:
// curl --request GET \
// --url https://api-sandbox.rabobank.nl/openapi/sandbox/payments/account-information/ais/v3/accounts \
// --header 'accept: application/json' \
// --header 'authorization: Bearer REPLACE_BEARER_TOKEN' \
// --header 'date: REPLACE_THIS_VALUE' \
// --header 'digest: REPLACE_THIS_VALUE' \
// --header 'psu-ip-address: OPTIONAL' \
// --header 'signature: REPLACE_THIS_VALUE' \
// --header 'tpp-signature-certificate: MIIDkDCCAnigA ... cwE6gUl0rMA==' \
// --header 'x-ibm-client-id: Client ID' \
// --header 'x-request-id: REPLACE_THIS_VALUE'
// Load the previously fetched OAuth2 access token.
let jsonToken = CkoJsonObject()!
success = jsonToken.loadFile(path: "qa_data/tokens/rabobank.json")
if success == false {
print("\(jsonToken.lastErrorText!)")
return
}
// This adds the "authorization: Bearer REPLACE_BEARER_TOKEN" header.
http.authToken = jsonToken.string(of: "access_token")
// This is the TTP Signature certificate: The certificate used for signing the request.
let sbTppCert = CkoStringBuilder()!
sbTppCert.append(value: "MIIDkDCCAnigAwIBAgIEWs3AJDANBgkqhkiG9w0BAQsFADCBiTELMAkGA1UEBhMC")
sbTppCert.append(value: "TkwxEDAOBgNVBAgMB1V0cmVjaHQxEDAOBgNVBAcMB1V0cmVjaHQxETAPBgNVBAoM")
sbTppCert.append(value: "CFJhYm9iYW5rMRwwGgYDVQQLDBNPbmxpbmUgVHJhbnNhY3Rpb25zMSUwIwYDVQQD")
sbTppCert.append(value: "DBxQU0QyIEFQSSBQSSBTZXJ2aWNlcyBTYW5kYm94MB4XDTE4MDQxMTA3NTgyOFoX")
sbTppCert.append(value: "DTIzMDQxMTA3NTgyOFowgYkxCzAJBgNVBAYTAk5MMRAwDgYDVQQIDAdVdHJlY2h0")
sbTppCert.append(value: "MRAwDgYDVQQHDAdVdHJlY2h0MREwDwYDVQQKDAhSYWJvYmFuazEcMBoGA1UECwwT")
sbTppCert.append(value: "T25saW5lIFRyYW5zYWN0aW9uczElMCMGA1UEAwwcUFNEMiBBUEkgUEkgU2Vydmlj")
sbTppCert.append(value: "ZXMgU2FuZGJveDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANoAjqGW")
sbTppCert.append(value: "UgCIm2F+0sBSEwLal+T3u+uldLikpxHCB8iL1GD7FrRjcA+MVsxhvHly7vRsHK+t")
sbTppCert.append(value: "QyMSaeK782RHpY33qxPLc8LmoQLb2EuiQxXj9POYkYBQ74qkrZnvKVlR3WoyQWeD")
sbTppCert.append(value: "OXnSY2wbNFfkP8ET4ElwyuIIEriwYhab0OIrnnrO8X82/SPZxHwEd3aQjQ6uhiw8")
sbTppCert.append(value: "paDspJbS5WjEfuwY16KVVUYlhbtAwGjvc6aK0NBm+LH9fMLpAE6gfGZNy0gzMDor")
sbTppCert.append(value: "VNbkQK1IoAGD8p9ZHdB0F3FwkILEjUiQW6nK+/fKDNJ0TBbpgZUpY8bR460qzxKd")
sbTppCert.append(value: "eZ1yPDqX2Cjh6fkCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAYL4iD6noMJAt63kD")
sbTppCert.append(value: "ED4RB2mII/lssvHhcxuDpOm3Ims9urubFWEpvV5TgIBAxy9PBinOdjhO1kGJJnYi")
sbTppCert.append(value: "7F1jv1qnZwTV1JhYbvxv3+vk0jaiu7Ew7G3ASlzruXyMhN6t6jk9MpaWGl5Uw1T+")
sbTppCert.append(value: "gNRUcWQRR44g3ahQRIS/UHkaV+vcpOa8j186/1X0ULHfbcVQk4LMmJeXqNs8sBAU")
sbTppCert.append(value: "dKU/c6ssvj8jfJ4SfrurcBhY5UBTOdQOXTPY85aU3iFloerx7Oi9EHewxInOrU5X")
sbTppCert.append(value: "zqqTz2AQPXezexVeAQxP27lzqCmYC7CFiam6QBr06VebkmnPLfs76n8CDc1cwE6g")
sbTppCert.append(value: "Ul0rMA==")
http.setRequestHeader(name: "tpp-signature-certificate", value: sbTppCert.getAsString())
// ----------------------------------------------------------------
// We're not going to add the psu-ip-address header in this example.
// ----------------------------------------------------------------
// X-Request-ID header...
// Generate a UUID v4.
let crypt = CkoCrypt2()!
var xRequestId: String? = crypt.generateUuid()
http.setRequestHeader(name: "x-request-id", value: xRequestId)
// ----------------------------------------------------------------
// Date header...
let dt = CkoDateTime()!
dt.setFromCurrentSystemTime()
var dateHdrVal: String? = dt.get(asRfc822: false)
// The desire date/time format is the "RFC822" format.
http.setRequestHeader(name: "Date", value: dateHdrVal)
// ----------------------------------------------------------------
// Digest header...
crypt.hashAlgorithm = "SHA256"
crypt.encodingMode = "base64"
// A GET request has no HTTP request body. Therefore the payload is the empty string.
var payload: String? = ""
var payloadDigest: String? = crypt.hashStringENC(str: payload)
let sbDigestHdrVal = CkoStringBuilder()!
sbDigestHdrVal.append(value: "SHA-256=")
sbDigestHdrVal.append(value: payloadDigest)
http.setRequestHeader(name: "digest", value: sbDigestHdrVal.getAsString())
// ----------------------------------------------------------------
// The HTTP request needs to be signed for PSD2 API's...
// Create the signing string (to use in signing the HTTP request).
// See https://developer.rabobank.nl/signing-requests-psd2-apis
//
// For "account information" HTTP requests, we must use the following headers in the signing string.
// date
// digest
// x-request-id
let sbStringToSign = CkoStringBuilder()!
sbStringToSign.append(value: "date: ")
sbStringToSign.appendLine(str: dateHdrVal, crlf: false)
sbStringToSign.append(value: "digest: ")
sbStringToSign.appendLine(str: sbDigestHdrVal.getAsString(), crlf: false)
sbStringToSign.append(value: "x-request-id: ")
sbStringToSign.append(value: xRequestId)
// ----------------------------------------------------------------
// Sign with our private key...
let sbPrivKey = CkoStringBuilder()!
sbPrivKey.append(value: "MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDaAI6hllIAiJth")
sbPrivKey.append(value: "ftLAUhMC2pfk97vrpXS4pKcRwgfIi9Rg+xa0Y3APjFbMYbx5cu70bByvrUMjEmni")
sbPrivKey.append(value: "u/NkR6WN96sTy3PC5qEC29hLokMV4/TzmJGAUO+KpK2Z7ylZUd1qMkFngzl50mNs")
sbPrivKey.append(value: "GzRX5D/BE+BJcMriCBK4sGIWm9DiK556zvF/Nv0j2cR8BHd2kI0OroYsPKWg7KSW")
sbPrivKey.append(value: "0uVoxH7sGNeilVVGJYW7QMBo73OmitDQZvix/XzC6QBOoHxmTctIMzA6K1TW5ECt")
sbPrivKey.append(value: "SKABg/KfWR3QdBdxcJCCxI1IkFupyvv3ygzSdEwW6YGVKWPG0eOtKs8SnXmdcjw6")
sbPrivKey.append(value: "l9go4en5AgMBAAECggEAB8nsTqalwGIhFw8mbXuhNUFlGuek/arYLD6pv28swwQH")
sbPrivKey.append(value: "7v0ZlxFUcCHF+iBl0PsDwZTZQ4ePtgGS6ehoLkWHCzb1lEv5E1YVG5qKNE2UUwRl")
sbPrivKey.append(value: "fIyPakO6AzyV/UF3uzq7C+/GuXGNTKZxKewg5yD/DCFvKoCOpxu9u36FyqP/hw0S")
sbPrivKey.append(value: "ADVlmp35/zoPDPZzu1j4FiCo0pJ9LwJcHxeJHopNAKDw9k6I4z/grskdgupsGzK2")
sbPrivKey.append(value: "BiGiQ/+wmmO68/6Xa6KWfpr1PQ6ODJHgzZsdGCVi6Ebaqlj6BbsYWxP6h3lrsGt+")
sbPrivKey.append(value: "LmHBaN2jCD6cDp+lihqFgnm8hfdv0lmbPilp71EDfwKBgQD6U8PBzZtN8yXm5WuS")
sbPrivKey.append(value: "NL+/8q5GjNmeTJBSo1gM6Y8vOT4QAE147LbVuVBDwyHPoSrNejePae6Q14PswjBy")
sbPrivKey.append(value: "T7B8DZ0OeQyGa3trrFg/ib7Vv4ZMvJqX9+WzBrzZsxTg7oCKHzmCR4vIRItKHH3z")
sbPrivKey.append(value: "Wnnhqlo8ic2AZ2O43cdJosbO1wKBgQDe8UODOLu0vnHohOKeUqF3w/ZOB2+83/js")
sbPrivKey.append(value: "YyUbSkzsGvHIwTjObuMUFTQvdMZ6IkIyJdfnDZIbvlBSD8tzL5iKFTNCK2nL1i4G")
sbPrivKey.append(value: "iFr0CYLaHAlhJ5GEbTrTMDoJeBPerZq83HPrSa/Wb0xO18QTWsoVQPFfPFbbcQyI")
sbPrivKey.append(value: "9ryJ2iIDrwKBgQC6kuAefG46ZPVk6K2KZUJdgDUgZC52a75NuW0RAqszmUiGiJM1")
sbPrivKey.append(value: "g8ip9tq6BqAWrprGV0c93shusBKlzf5p1LdHXqYmeVY6gbWVhPipMrNHgN5KJ3BZ")
sbPrivKey.append(value: "v+w1yNnMsErpcxne2HL2hPjMJTpj3GSLkm2xIlTrNhIyl9ydlr7IRUhENQKBgQCv")
sbPrivKey.append(value: "i6HxbXa/90WSJTCcIcxqla8X+dsOCf3jhJ3vQy4Wq5C+1wZ35fCAG8Ifq/+so9Uj")
sbPrivKey.append(value: "z5CVqqXlmpF8TFuSs2OVNuRJsg14J4nOMwgLKIIUZAcurQ10DN5I9Kx+UEK1EFXL")
sbPrivKey.append(value: "aHsORdNjMfgQDO2jn9WHrr9gkg6CdB2+qyoCEfS+mQKBgBW08lcy9V5RzRWb/v/j")
sbPrivKey.append(value: "xsc7ovmgAhCJhDeV7dPbx4HbFeoQJlbA8g1thdcFlcatSGyNDbvNE1GPSd4NhkpR")
sbPrivKey.append(value: "Y6Hfv53kdEzjVkEtU8lUdL7HNVJqX7bU7oZlfbYcwxWQ1Gg8C1oLIAyEt71slQtd")
sbPrivKey.append(value: "RiNYBRZTQe2F0wxbXnuUqLAw")
let privKey = CkoPrivateKey()!
success = privKey.loadPem(str: sbPrivKey.getAsString())
if success == false {
print("\(privKey.lastErrorText!)")
return
}
let rsa = CkoRsa()!
success = rsa.usePrivateKey(privKey: privKey)
if success == false {
print("\(rsa.lastErrorText!)")
return
}
rsa.encodingMode = "base64"
var b64Signature: String? = rsa.signStringENC(str: sbStringToSign.getAsString(), hashAlg: "SHA256")
// ----------------------------------------------------------------
// Add the "signature" header.
//
// The signature header will look like this:
// signature: keyId="1523433508",algorithm="rsa-sha512",headers="date digest x-request-id",signature="y5o7gKxmfA6AT6...blE1A9Q=="
//
// The keyId is the serial number of the certificate as defined in 'TPP-Signing-Certificate' header, the format should be Integer not hex.
let cert = CkoCert()!
success = cert.set(fromEncoded: sbTppCert.getAsString())
if success == false {
print("\(cert.lastErrorText!)")
return
}
let sbSigHdrVal = CkoStringBuilder()!
sbSigHdrVal.append(value: "keyId=\"")
sbSigHdrVal.append(value: cert.serialDecimal)
sbSigHdrVal.append(value: "\",")
sbSigHdrVal.append(value: "algorithm=\"rsa-sha256\",")
sbSigHdrVal.append(value: "headers=\"date digest x-request-id\",")
sbSigHdrVal.append(value: "signature=\"")
sbSigHdrVal.append(value: b64Signature)
sbSigHdrVal.append(value: "\"")
http.setRequestHeader(name: "signature", value: sbSigHdrVal.getAsString())
// ----------------------------------------------------------------
// Add remaining headers...
http.setRequestHeader(name: "x-ibm-client-id", value: "YOUR_APP_CLIENT_ID")
http.setRequestHeader(name: "accept", value: "application/json")
// ----------------------------------------------------------------
// Add our certificate and key for mutual TLS
// (provide a registered X509 client certificate during TLS handhake)
let tlsCert = CkoCert()!
success = tlsCert.load(fromFile: "qa_data/certs_and_keys/ING/example_client_tls.cer")
if success == false {
print("\(tlsCert.lastErrorText!)")
return
}
let bdPrivKey = CkoBinData()!
success = bdPrivKey.loadFile(path: "qa_data/certs_and_keys/ING/example_client_tls.key")
if success == false {
print("Failed to load example_client_tls.key")
return
}
// The OAuth 2.0 client_id for these certificates is e77d776b-90af-4684-bebc-521e5b2614dd.
// Please note down this client_id since you will need it in the next steps to call the API.
let tlsPrivKey = CkoPrivateKey()!
success = tlsPrivKey.loadAnyFormat(privKeyData: bdPrivKey, password: "")
if success == false {
print("\(tlsPrivKey.lastErrorText!)")
return
}
// Associate the private key with the certificate.
success = tlsCert.setPrivateKey(privKey: tlsPrivKey)
if success == false {
print("\(tlsCert.lastErrorText!)")
return
}
success = http.setSslClientCert(cert: tlsCert)
if success == false {
print("\(http.lastErrorText!)")
return
}
// ----------------------------------------------------------------
// Finally, send the request...
let sbResponseBody = CkoStringBuilder()!
success = http.quickGetSb(url: "https://api-sandbox.rabobank.nl/openapi/sandbox/payments/account-information/ais/v3/accounts", sbContent: sbResponseBody)
if success == false {
print("\(http.lastErrorText!)")
print("\(sbResponseBody.getAsString()!)")
return
}
let jResp = CkoJsonObject()!
jResp.loadSb(sb: sbResponseBody)
jResp.emitCompact = false
print("Response Body:")
print("\(jResp.emit()!)")
var respStatusCode: Int = http.lastStatus.intValue
print("Response Status Code = \(respStatusCode)")
if respStatusCode >= 400 {
print("Response Header:")
print("\(http.lastHeader!)")
print("Failed.")
return
}
// Sample JSON response:
// (Sample code for parsing the JSON response is shown below)
// {
// "accounts": [
// {
// "_links": {
// "account": "/v3/accounts/dW9od2VIVUhGVypIZHVpaGRhdWR3OGRoY",
// "balances": "/v3/accounts/dW9od2VIVUhGVypIZHVpaGRhdWR3OGRoY/balances",
// "transactions": "/v3/accounts/dW9od2VIVUhGVypIZHVpaGRhdWR3OGRoY/transactions"
// },
// "currency": "EUR",
// "iban": "NL05RABO0812836782",
// "name": "Rosie Roy",
// "resourceId": "dW9od2VIVUhGVypIZHVpaGRhdWR3OGRoY",
// "status": "enabled"
// }
// ]
// }
// Sample code for parsing the JSON response...
// Use the following online tool to generate parsing code from sample JSON:
// Generate Parsing Code from JSON
var v_linksAccount: String?
var v_linksBalances: String?
var v_linksTransactions: String?
var currency: String?
var iban: String?
var name: String?
var resourceId: String?
var status: String?
var i: Int = 0
var count_i: Int = jResp.size(ofArray: "accounts").intValue
while i < count_i {
jResp.i = i
v_linksAccount = jResp.string(of: "accounts[i]._links.account")
v_linksBalances = jResp.string(of: "accounts[i]._links.balances")
v_linksTransactions = jResp.string(of: "accounts[i]._links.transactions")
currency = jResp.string(of: "accounts[i].currency")
iban = jResp.string(of: "accounts[i].iban")
name = jResp.string(of: "accounts[i].name")
resourceId = jResp.string(of: "accounts[i].resourceId")
status = jResp.string(of: "accounts[i].status")
i = i + 1
}
}