(Visual FoxPro) Plaza API (bol.com) HMAC-SHA256 Authentication

Demonstrates how to compute the Authorization header for bol.com using HMAC-SHA256.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

LOCAL loCrypt
LOCAL lcPublicKey
LOCAL lcPrivateKey
LOCAL lcHttp_verb
LOCAL lcContent_type
LOCAL lcX_bol_date
LOCAL lcUri
LOCAL loSb
LOCAL lcMac
LOCAL loSbHeader
LOCAL lcHdrValue

* This example assumes the Chilkat API to have been previously unlocked.
* See Global Unlock Sample for sample code.

* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Crypt2')
loCrypt = CreateObject('Chilkat.Crypt2')

loCrypt.EncodingMode = "base64"
loCrypt.HashAlgorithm = "sha256"
loCrypt.MacAlgorithm = "hmac"

lcPublicKey = "oRNWbHFXtAECmhnZmEndcjLIaSKbRMVE"
lcPrivateKey = "MaQHPOnmYkPZNgeRziPnQyyOJYytUbcFBVJBvbMKoDdpPqaZbaOiLUTWzPAkpPsZFZbJHrcoltdgpZolyNcgvvBaKcmkqFjucFzXhDONTsPAtHHyccQlLUZpkOuywMiOycDWcCySFsgpDiyGnCWCZJkNTtVdPxbSUTWVIFQiUxaPDYDXRQAVVTbSVZArAZkaLDLOoOvPzxSdhnkkJWzlQDkqsXNKfAIgAldrmyfROSyCGMCfvzdQdUQEaYZTPEoA"

* The string to sign is this:
* http_verb +'\n\n'+ content_type +'\n'+ x_bol_date +'\n'+ 'x-bol-date:'+ x_bol_date +'\n'+ uri

lcHttp_verb = "GET"
lcContent_type = "application/xml"
lcX_bol_date = "Wed, 17 Feb 2016 00:00:00 GMT"
lcUri = "/services/rest/orders/v2"

* IMPORTANT: Notice the use of underscore and hyphen (dash) chars in x-bol-date vs. x_bol_date.
* In one place hypens are used.  In two places, underscore chars are used.
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.StringBuilder')
loSb = CreateObject('Chilkat.StringBuilder')
loSb.Append(lcHttp_verb)
loSb.Append(CHR(10) + CHR(10))
loSb.Append(lcContent_type)
loSb.Append(CHR(10))
loSb.Append(lcX_bol_date)
loSb.Append(CHR(10) + "x-bol-date:")
loSb.Append(lcX_bol_date)
loSb.Append(CHR(10))
loSb.Append(lcUri)
? "[" + loSb.GetAsString() + "]"

* Set the HMAC key:
loCrypt.SetMacKeyEncoded(lcPrivateKey,"ascii")
lcMac = loCrypt.MacStringENC(loSb.GetAsString())

* The answer should be: nqzLWvXI1eBhBXrRx5NF23V5hS8Q1xWCloJzPi/RAts=
? lcMac

* The last step is to append the public key with the signature
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.StringBuilder')
loSbHeader = CreateObject('Chilkat.StringBuilder')
loSbHeader.Append(lcPublicKey)
loSbHeader.Append(":")
loSbHeader.Append(lcMac)

lcHdrValue = loSbHeader.GetAsString()
? lcHdrValue

RELEASE loCrypt
RELEASE loSb
RELEASE loSbHeader