(AutoIt) REST Basic Auth with Secure Strings

Demonstrates how to do REST Basic authentication using secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

; This example requires the Chilkat API to have been previously unlocked.
; See Global Unlock Sample for sample code.

Local $bSuccess

; Imagine we've previously saved our encrypted login and password within a JSON config file
; that contains this:

; {
;   "http_login": "mCrOmA7mBA7Au9RuJGb9hw==",
;   "http_password": "jJtiI9TgErTTpqBz9JtHBw=="
; }

$oJson = ObjCreate("Chilkat.JsonObject")
$oJson.LoadFile("qa_data/passwords/http.json")

$oCrypt = ObjCreate("Chilkat.Crypt2")

; These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
$oCrypt.CryptAlgorithm = "aes"
$oCrypt.CipherMode = "cbc"
$oCrypt.KeyLength = 128
$oCrypt.SetEncodedKey "000102030405060708090A0B0C0D0E0F","hex"
$oCrypt.SetEncodedIV "000102030405060708090A0B0C0D0E0F","hex"
$oCrypt.EncodingMode = "base64"

$oSsLogin = ObjCreate("Chilkat.SecureString")
$oSsPassword = ObjCreate("Chilkat.SecureString")

; Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
; a randomly generated session key.)
$oCrypt.DecryptSecureENC($oJson.StringOf("http_login"),$oSsLogin)
$oCrypt.DecryptSecureENC($oJson.StringOf("http_password"),$oSsPassword)

$oRest = ObjCreate("Chilkat.Rest")

; Connect to a REST server.
Local $bTls = True
Local $iPort = 443
Local $bAutoReconnect = True
$bSuccess = $oRest.Connect("chilkatsoft.com",$iPort,$bTls,$bAutoReconnect)

; Cause the "Authorization: Basic ..." header to be added to HTTP requests
$oRest.SetAuthBasicSecure($oSsLogin,$oSsPassword)

Local $sResponseJson = $oRest.FullRequestNoBody("GET","/helloWorld.html")
If ($oRest.LastMethodSuccess <> True) Then
    ConsoleWrite($oRest.LastErrorText & @CRLF)
    Exit
EndIf

; Show the LastRequestHeader that was sent.
ConsoleWrite($oRest.LastRequestHeader & @CRLF)

; The LastRequestHeader looks like this:

; Host: chilkatsoft.com
; Authorization: Basic bXlIdHRwTG9naW46bXlIdHRwUGFzc3dvcmQ=