(Lianja) Plaza API (bol.com) HMAC-SHA256 Authentication

Demonstrates how to compute the Authorization header for bol.com using HMAC-SHA256.

Chilkat Lianja Extension Download Chilkat Lianja Extension

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

loCrypt = createobject("CkCrypt2")

loCrypt.EncodingMode = "base64"
loCrypt.HashAlgorithm = "sha256"
loCrypt.MacAlgorithm = "hmac"

lcPublicKey = "oRNWbHFXtAECmhnZmEndcjLIaSKbRMVE"
lcPrivateKey = "MaQHPOnmYkPZNgeRziPnQyyOJYytUbcFBVJBvbMKoDdpPqaZbaOiLUTWzPAkpPsZFZbJHrcoltdgpZolyNcgvvBaKcmkqFjucFzXhDONTsPAtHHyccQlLUZpkOuywMiOycDWcCySFsgpDiyGnCWCZJkNTtVdPxbSUTWVIFQiUxaPDYDXRQAVVTbSVZArAZkaLDLOoOvPzxSdhnkkJWzlQDkqsXNKfAIgAldrmyfROSyCGMCfvzdQdUQEaYZTPEoA"

// The string to sign is this:
// http_verb +'\n\n'+ content_type +'\n'+ x_bol_date +'\n'+ 'x-bol-date:'+ x_bol_date +'\n'+ uri

lcHttp_verb = "GET"
lcContent_type = "application/xml"
lcX_bol_date = "Wed, 17 Feb 2016 00:00:00 GMT"
lcUri = "/services/rest/orders/v2"

// IMPORTANT: Notice the use of underscore and hyphen (dash) chars in x-bol-date vs. x_bol_date.
// In one place hypens are used.  In two places, underscore chars are used.
loSb = createobject("CkStringBuilder")
loSb.Append(lcHttp_verb)
loSb.Append(Chr(10) + Chr(10))
loSb.Append(lcContent_type)
loSb.Append(Chr(10))
loSb.Append(lcX_bol_date)
loSb.Append(Chr(10) + "x-bol-date:")
loSb.Append(lcX_bol_date)
loSb.Append(Chr(10))
loSb.Append(lcUri)
? "[" + loSb.GetAsString() + "]"

// Set the HMAC key:
loCrypt.SetMacKeyEncoded(lcPrivateKey,"ascii")
lcMac = loCrypt.MacStringENC(loSb.GetAsString())

// The answer should be: nqzLWvXI1eBhBXrRx5NF23V5hS8Q1xWCloJzPi/RAts=
? lcMac

// The last step is to append the public key with the signature
loSbHeader = createobject("CkStringBuilder")
loSbHeader.Append(lcPublicKey)
loSbHeader.Append(":")
loSbHeader.Append(lcMac)

lcHdrValue = loSbHeader.GetAsString()
? lcHdrValue


release loCrypt
release loSb
release loSbHeader