(Android™) Plaza API (bol.com) HMAC-SHA256 Authentication

Demonstrates how to compute the Authorization header for bol.com using HMAC-SHA256.

Chilkat Android™ Downloads Android™ Java Libraries Android C/C++ Libraries

// Important: Don't forget to include the call to System.loadLibrary
// as shown at the bottom of this code sample.
package com.test;

import android.app.Activity;
import com.chilkatsoft.*;

import android.widget.TextView;
import android.os.Bundle;

public class SimpleActivity extends Activity {

  private static final String TAG = "Chilkat";

  // Called when the activity is first created.
  @Override
  public void onCreate(Bundle savedInstanceState) {
    super.onCreate(savedInstanceState);

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    CkCrypt2 crypt = new CkCrypt2();

    crypt.put_EncodingMode("base64");
    crypt.put_HashAlgorithm("sha256");
    crypt.put_MacAlgorithm("hmac");

    String publicKey = "oRNWbHFXtAECmhnZmEndcjLIaSKbRMVE";
    String privateKey = "MaQHPOnmYkPZNgeRziPnQyyOJYytUbcFBVJBvbMKoDdpPqaZbaOiLUTWzPAkpPsZFZbJHrcoltdgpZolyNcgvvBaKcmkqFjucFzXhDONTsPAtHHyccQlLUZpkOuywMiOycDWcCySFsgpDiyGnCWCZJkNTtVdPxbSUTWVIFQiUxaPDYDXRQAVVTbSVZArAZkaLDLOoOvPzxSdhnkkJWzlQDkqsXNKfAIgAldrmyfROSyCGMCfvzdQdUQEaYZTPEoA";

    // The string to sign is this:
    // http_verb +'\n\n'+ content_type +'\n'+ x_bol_date +'\n'+ 'x-bol-date:'+ x_bol_date +'\n'+ uri

    String http_verb = "GET";
    String content_type = "application/xml";
    String x_bol_date = "Wed, 17 Feb 2016 00:00:00 GMT";
    String uri = "/services/rest/orders/v2";

    // IMPORTANT: Notice the use of underscore and hyphen (dash) chars in x-bol-date vs. x_bol_date.
    // In one place hypens are used.  In two places, underscore chars are used.
    CkStringBuilder sb = new CkStringBuilder();
    sb.Append(http_verb);
    sb.Append("\n\n");
    sb.Append(content_type);
    sb.Append("\n");
    sb.Append(x_bol_date);
    sb.Append("\nx-bol-date:");
    sb.Append(x_bol_date);
    sb.Append("\n");
    sb.Append(uri);
    Log.i(TAG, "[" + sb.getAsString() + "]");

    // Set the HMAC key:
    crypt.SetMacKeyEncoded(privateKey,"ascii");
    String mac = crypt.macStringENC(sb.getAsString());

    // The answer should be: nqzLWvXI1eBhBXrRx5NF23V5hS8Q1xWCloJzPi/RAts=
    Log.i(TAG, mac);

    // The last step is to append the public key with the signature
    CkStringBuilder sbHeader = new CkStringBuilder();
    sbHeader.Append(publicKey);
    sbHeader.Append(":");
    sbHeader.Append(mac);

    String hdrValue = sbHeader.getAsString();
    Log.i(TAG, hdrValue);

  }

  static {
      System.loadLibrary("chilkat");

      // Note: If the incorrect library name is passed to System.loadLibrary,
      // then you will see the following error message at application startup:
      //"The application <your-application-name> has stopped unexpectedly. Please try again."
  }
}