Visual FoxPro

Plaza API (bol.com) HMAC-SHA256 Authentication

See more Encryption Examples

Demonstrates how to compute the Authorization header for bol.com using HMAC-SHA256. Visual FoxPro

LOCAL loCrypt
LOCAL lcPublicKey
LOCAL lcPrivateKey
LOCAL lcHttp_verb
LOCAL lcContent_type
LOCAL lcX_bol_date
LOCAL lcUri
LOCAL loSb
LOCAL lcMac
LOCAL loSbHeader
LOCAL lcHdrValue

* This example assumes the Chilkat API to have been previously unlocked.
* See Global Unlock Sample for sample code.

loCrypt = CreateObject('Chilkat.Crypt2')

loCrypt.EncodingMode = "base64"
loCrypt.HashAlgorithm = "sha256"
loCrypt.MacAlgorithm = "hmac"

lcPublicKey = "oRNWbHFXtAECmhnZmEndcjLIaSKbRMVE"
lcPrivateKey = "MaQHPOnmYkPZNgeRziPnQyyOJYytUbcFBVJBvbMKoDdpPqaZbaOiLUTWzPAkpPsZFZbJHrcoltdgpZolyNcgvvBaKcmkqFjucFzXhDONTsPAtHHyccQlLUZpkOuywMiOycDWcCySFsgpDiyGnCWCZJkNTtVdPxbSUTWVIFQiUxaPDYDXRQAVVTbSVZArAZkaLDLOoOvPzxSdhnkkJWzlQDkqsXNKfAIgAldrmyfROSyCGMCfvzdQdUQEaYZTPEoA"

* The string to sign is this:
* http_verb +'\n\n'+ content_type +'\n'+ x_bol_date +'\n'+ 'x-bol-date:'+ x_bol_date +'\n'+ uri

lcHttp_verb = "GET"
lcContent_type = "application/xml"
lcX_bol_date = "Wed, 17 Feb 2016 00:00:00 GMT"
lcUri = "/services/rest/orders/v2"

* IMPORTANT: Notice the use of underscore and hyphen (dash) chars in x-bol-date vs. x_bol_date.
* In one place hypens are used.  In two places, underscore chars are used.
loSb = CreateObject('Chilkat.StringBuilder')
loSb.Append(lcHttp_verb)
loSb.Append(CHR(10) + CHR(10))
loSb.Append(lcContent_type)
loSb.Append(CHR(10))
loSb.Append(lcX_bol_date)
loSb.Append(CHR(10) + "x-bol-date:")
loSb.Append(lcX_bol_date)
loSb.Append(CHR(10))
loSb.Append(lcUri)
? "[" + loSb.GetAsString() + "]"

* Set the HMAC key:
loCrypt.SetMacKeyEncoded(lcPrivateKey,"ascii")
lcMac = loCrypt.MacStringENC(loSb.GetAsString())

* The answer should be: nqzLWvXI1eBhBXrRx5NF23V5hS8Q1xWCloJzPi/RAts=
? lcMac

* The last step is to append the public key with the signature
loSbHeader = CreateObject('Chilkat.StringBuilder')
loSbHeader.Append(lcPublicKey)
loSbHeader.Append(":")
loSbHeader.Append(lcMac)

lcHdrValue = loSbHeader.GetAsString()
? lcHdrValue

RELEASE loCrypt
RELEASE loSb
RELEASE loSbHeader