Delphi ActiveX

ZATCA Onboarding Get Compliance CSID

See more ZATCA Examples

Demonstrates sending a POST to get a compliance CSID, which is two parts: A binary security token, and a secret. Delphi ActiveX

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Chilkat_TLB;

...

procedure TForm1.Button1Click(Sender: TObject);
var
success: Integer;
otp: WideString;
pem: TChilkatPem;
sbCsrBase64: TChilkatStringBuilder;
numReplaced: Integer;
csrBase64: WideString;
json: TChilkatJsonObject;
http: TChilkatHttp;
resp: TChilkatHttpResponse;
jsonResp: TChilkatJsonObject;

begin
success := 0;

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// It is assumed you've already generated a CSR.
// Also, you'll need an OTP code, valid for 1 hour, which is generated online in the Fatoora portal.  See 
// https://zatca.gov.sa/ar/E-Invoicing/Introduction/Guidelines/Documents/E-invoicing%20Detailed%20Technical%20Guidelines.pdf

// Manually replace this with the OTP code you interactively obtained in a browser session from the Fatoora portal.
// The OTP code is valid for 1 hour.
otp := '123434';

// You should already have a CSR in a file containing something that looks like this:

// -----BEGIN CERTIFICATE REQUEST-----
// MIIB5DCCAYsCAQAwTDELMAkGA1UEBhMCU0ExFTATBgNVBAsMDFJpeWFkIEJyYW5j
// aDEQMA4GA1UECgwHQ29udG9zbzEUMBIGA1UEAwwLRUExMjM0NTY3ODkwVjAQBgcq
// hkjOPQIBBgUrgQQACgNCAAQI6op+6GQ4Gmn9oy0DpGxX0lFtUIvj+4Jtnp0VyEsH
// +ZO7lpgksbRC484R3fAsO0v+Ly24ZIUIOYEIAeJ1f6AooIHfMIHcBgkqhkiG9w0B
// CQ4xgc4wgcswIQYJKwYBBAGCNxQCBBQTElpBVENBLUNvZGUtU2lnbmluZzCBpQYD
// VR0RBIGdMIGapIGXMIGUMTswOQYDVQQEDDIxLVRTVHwyLVRTVHwzLWVkMjJmMWQ4
// LWU2YTItMTExOC05YjU4LWQ5YThmMTFlNDQ1ZjEfMB0GCgmSJomT8ixkAQEMDzMx
// MDEyMjM5MzUwMDAwMzENMAsGA1UEDAwEMTEwMDESMBAGA1UEGgwJTXlBZGRyZXNz
// MREwDwYDVQQPDAhJbmR1c3RyeTAKBggqhkjOPQQDAgNHADBEAiBurm6KdAeHfXzt
// h/jk8xSMBP4TAkkFrg+hWDhfI0/SuAIgJi8ectM7YwBIBCmf0tdFcVTU7GBbvjnK
// xValZCAO39M=
// -----END CERTIFICATE REQUEST-----

pem := TChilkatPem.Create(Self);
success := pem.LoadPemFile('c:/aaworkarea/zatca/onboarding/taxpayer.csr','');
if (success = 0) then
  begin
    Memo1.Lines.Add(pem.LastErrorText);
    Exit;
  end;

// Get the base64 from the CSR in a single line.
sbCsrBase64 := TChilkatStringBuilder.Create(Self);
sbCsrBase64.Append(pem.GetEncodedItem('csr','','base64',0));
numReplaced := sbCsrBase64.Replace(#13,'');
numReplaced := sbCsrBase64.Replace(#10,'');
csrBase64 := sbCsrBase64.GetAsString();
Memo1.Lines.Add(csrBase64);

json := TChilkatJsonObject.Create(Self);
json.EmitCompact := 0;
json.UpdateSb('csr',sbCsrBase64.ControlInterface);

http := TChilkatHttp.Create(Self);
http.Accept := 'application/json';
http.SetRequestHeader('OTP',otp);
http.SetRequestHeader('Accept-Version','V2');
resp := TChilkatHttpResponse.Create(Self);
success := http.HttpJson('POST','https://gw-apic-gov.gazt.gov.sa/e-invoicing/core/compliance',json.ControlInterface,'application/json',resp.ControlInterface);
if (success = 0) then
  begin
    Memo1.Lines.Add(http.LastErrorText);
    Exit;
  end;

if (resp.StatusCode <> 200) then
  begin
    Memo1.Lines.Add(resp.BodyStr);
    Memo1.Lines.Add('response status code = ' + IntToStr(resp.StatusCode));
    Memo1.Lines.Add('Failed');
    Exit;
  end;

jsonResp := TChilkatJsonObject.Create(Self);
resp.GetBodyJson(jsonResp.ControlInterface);

jsonResp.EmitCompact := 0;
Memo1.Lines.Add('JSON response:');
Memo1.Lines.Add(jsonResp.Emit());
end;