Dart

ZATCA Onboarding Get Compliance CSID

See more ZATCA Examples

Demonstrates sending a POST to get a compliance CSID, which is two parts: A binary security token, and a secret. Dart

import 'package:chilkat/chilkat.dart';

void main() {
  // This example requires the Chilkat API to have been previously unlocked.
  // See Global Unlock Sample for sample code.

  // It is assumed you've already generated a CSR.
  // Also, you'll need an OTP code, valid for 1 hour, which is generated online in the Fatoora portal.  See 
  // https://zatca.gov.sa/ar/E-Invoicing/Introduction/Guidelines/Documents/E-invoicing%20Detailed%20Technical%20Guidelines.pdf

  // Manually replace this with the OTP code you interactively obtained in a browser session from the Fatoora portal.
  // The OTP code is valid for 1 hour.
  final otp = '123434';

  // You should already have a CSR in a file containing something that looks like this:

  // -----BEGIN CERTIFICATE REQUEST-----
  // MIIB5DCCAYsCAQAwTDELMAkGA1UEBhMCU0ExFTATBgNVBAsMDFJpeWFkIEJyYW5j
  // aDEQMA4GA1UECgwHQ29udG9zbzEUMBIGA1UEAwwLRUExMjM0NTY3ODkwVjAQBgcq
  // hkjOPQIBBgUrgQQACgNCAAQI6op+6GQ4Gmn9oy0DpGxX0lFtUIvj+4Jtnp0VyEsH
  // +ZO7lpgksbRC484R3fAsO0v+Ly24ZIUIOYEIAeJ1f6AooIHfMIHcBgkqhkiG9w0B
  // CQ4xgc4wgcswIQYJKwYBBAGCNxQCBBQTElpBVENBLUNvZGUtU2lnbmluZzCBpQYD
  // VR0RBIGdMIGapIGXMIGUMTswOQYDVQQEDDIxLVRTVHwyLVRTVHwzLWVkMjJmMWQ4
  // LWU2YTItMTExOC05YjU4LWQ5YThmMTFlNDQ1ZjEfMB0GCgmSJomT8ixkAQEMDzMx
  // MDEyMjM5MzUwMDAwMzENMAsGA1UEDAwEMTEwMDESMBAGA1UEGgwJTXlBZGRyZXNz
  // MREwDwYDVQQPDAhJbmR1c3RyeTAKBggqhkjOPQQDAgNHADBEAiBurm6KdAeHfXzt
  // h/jk8xSMBP4TAkkFrg+hWDhfI0/SuAIgJi8ectM7YwBIBCmf0tdFcVTU7GBbvjnK
  // xValZCAO39M=
  // -----END CERTIFICATE REQUEST-----

  final pem = CkPem();
  try {
    pem.loadPemFile('c:/aaworkarea/zatca/onboarding/taxpayer.csr', '');
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    return;
  }

  // Get the base64 from the CSR in a single line.
  final sbCsrBase64 = CkStringBuilder();
  sbCsrBase64.append(pem.getEncodedItem('csr', '', 'base64', 0));
  var numReplaced = sbCsrBase64.replace('\r', '');
  numReplaced = sbCsrBase64.replace('\n', '');
  final csrBase64 = sbCsrBase64.getAsString();
  print(csrBase64);

  final json = CkJsonObject();
  json.emitCompact = false;
  json.updateSb('csr', sbCsrBase64);

  final http = CkHttp();
  http.accept = 'application/json';
  http.setRequestHeader('OTP', otp);
  http.setRequestHeader('Accept-Version', 'V2');
  final resp = CkHttpResponse();
  try {
    http.httpJson('POST', 'https://gw-apic-gov.gazt.gov.sa/e-invoicing/core/compliance', json, 'application/json', resp);
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    return;
  }

  if (resp.statusCode != 200) {
    print(resp.bodyStr);
    print('response status code = ${resp.statusCode}');
    print('Failed');
    return;
  }

  final jsonResp = CkJsonObject();
  resp.getBodyJson(jsonResp);

  jsonResp.emitCompact = false;
  print('JSON response:');
  print(jsonResp.emit());
}