(MFC) Hungary NAV Token Exchange

Demonstrates the tokenExchange request for the Hungarian NAV Online Invoicing System REST API v2.0.

Note: This example requires Chilkat v9.5.0.83 or greater.

For more information, see https://onlineszamla.nav.gov.hu/api/files/container/download/Online%20Szamla_Interfesz%20specifik%C3%A1ci%C3%B3_EN_v2.0.pdf

Chilkat C/C++ Library Downloads MS Visual C/C++ Libs

See Also: Using MFC CString in Chilkat

#include <CkCrypt2.h>
#include <CkDateTime.h>
#include <CkPrng.h>
#include <CkStringBuilder.h>
#include <CkXml.h>
#include <CkHttp.h>
#include <CkHttpResponse.h>

void ChilkatSample(void)
    {
    CkString strOut;

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Build the following XML:

    // Use this online tool to generate code from sample XML: 
    // Generate Code to Create XML

    // <?xml version="1.0" encoding="UTF-8"?>
    // <TokenExchangeRequest xmlns="http://schemas.nav.gov.hu/OSA/2.0/api">
    // 	<header>
    // 		<requestId>RID896801578348</requestId>
    // 		<timestamp>2019-09-11T10:55:31.440Z</timestamp>
    // 		<requestVersion>2.0</requestVersion>
    // 		<headerVersion>1.0</headerVersion>
    // 	</header>
    // 	<user>
    // 		<login>lwilsmn0uqdxe6u</login>
    // 		<passwordHash>2F43840A882CFDB7DB0FEC07D419D030D864B47B6B541DC280EF81B937B7A176E33C052B0D26638CC18A7A2C08D8D311733078A774BF43F6CA57FE8CD74DC28E</passwordHash>
    // 		<taxNumber>11111111</taxNumber>
    // 		<requestSignature>B4B5E0F197BFFD3DF69BCC98D3BE775F65FD5445EEF95C9D6B6C59425F2B81C4F6DA1FD563B0C7E7D98AF1E1725E5C63C2803B5D3A93D1C02ED354AC92F2CC94</requestSignature>
    // 		<!--<signKey>ac-ac3a-7f661bff7d342N43CYX4U9FG</signKey>-->
    // 	</user>
    // 	<software>
    // 		<softwareId>123456789123456789</softwareId>
    // 		<softwareName>string</softwareName>
    // 		<softwareOperation>LOCAL_SOFTWARE</softwareOperation>
    // 		<softwareMainVersion>string</softwareMainVersion>
    // 		<softwareDevName>string</softwareDevName>
    // 		<softwareDevContact>string</softwareDevContact>
    // 		<softwareDevCountryCode>HU</softwareDevCountryCode>
    // 		<softwareDevTaxNumber>string</softwareDevTaxNumber>
    // 	</software>
    // </TokenExchangeRequest>

    bool success;
    CkCrypt2 crypt;

    CkDateTime dtNow;
    dtNow.SetFromCurrentSystemTime();
    strOut.append(dtNow.getAsTimestamp(false));
    strOut.append("\r\n");

    // The hash algorithm for the password is SHA512 (not SHA3-512).
    crypt.put_HashAlgorithm("sha512");
    crypt.put_EncodingMode("hex");
    const char *myPassword = "my-password";
    const char *passwordHash = crypt.hashStringENC(myPassword);

    // Generate a random request ID like "RID215118906689"
    CkPrng prng;
    CkStringBuilder sbRequestId;
    sbRequestId.Append("RID");
    sbRequestId.Append(prng.randomString(12,true,false,false));
    strOut.append("generated requestId = ");
    strOut.append(sbRequestId.getAsString());
    strOut.append("\r\n");

    // Calculate the requestSignature
    crypt.put_HashAlgorithm("sha3-512");
    const char *signatureKey = "ce-8f5e-215119fa7dd621DLMRHRLH2S";

    CkStringBuilder sbFinalHashBase;

    // First append the timestamp because we are going to remove certain chars/parts.
    sbFinalHashBase.Append(dtNow.getAsTimestamp(false));
    int numReplaced = sbFinalHashBase.Replace("Z","");
    numReplaced = sbFinalHashBase.Replace("-","");
    numReplaced = sbFinalHashBase.Replace(":","");
    numReplaced = sbFinalHashBase.Replace("T","");

    // Prepend the requestId and append the signatureKey
    sbFinalHashBase.Prepend(sbRequestId.getAsString());
    sbFinalHashBase.Append(signatureKey);

    const char *requestSignature = crypt.hashStringENC(sbFinalHashBase.getAsString());

    CkXml xml;
    xml.put_Tag("TokenExchangeRequest");
    xml.AddAttribute("xmlns","http://schemas.nav.gov.hu/OSA/2.0/api");
    xml.UpdateChildContent("header|requestId",sbRequestId.getAsString());
    xml.UpdateChildContent("header|timestamp",dtNow.getAsTimestamp(false));
    xml.UpdateChildContent("header|requestVersion","2.0");
    xml.UpdateChildContent("header|headerVersion","1.0");
    xml.UpdateChildContent("user|login","lwilsmn0uqdxe6u");
    xml.UpdateChildContent("user|passwordHash",passwordHash);
    xml.UpdateChildContent("user|taxNumber","11111111");
    xml.UpdateChildContent("user|requestSignature",requestSignature);
    xml.UpdateChildContent("software|softwareId","123456789123456789");
    xml.UpdateChildContent("software|softwareName","string");
    xml.UpdateChildContent("software|softwareOperation","LOCAL_SOFTWARE");
    xml.UpdateChildContent("software|softwareMainVersion","string");
    xml.UpdateChildContent("software|softwareDevName","string");
    xml.UpdateChildContent("software|softwareDevContact","string");
    xml.UpdateChildContent("software|softwareDevCountryCode","HU");
    xml.UpdateChildContent("software|softwareDevTaxNumber","string");

    // POST the XML to https://api-test.onlineszamla.nav.gov.hu/invoiceService/v2/tokenExchange
    CkHttp http;
    http.put_Accept("application/xml");
    http.SetRequestHeader("Content-Type","application/xml");
    const char *endpoint = "https://api-test.onlineszamla.nav.gov.hu/invoiceService/v2/tokenExchange";
    CkHttpResponse *resp = http.PostXml(endpoint,xml.getXml(),"utf-8");
    if (http.get_LastMethodSuccess() == false) {
        strOut.append(http.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    strOut.append("Response status code = ");
    strOut.appendInt(resp->get_StatusCode());
    strOut.append("\r\n");

    CkXml respXml;
    respXml.LoadXml(resp->bodyStr());
    strOut.append("Response body:");
    strOut.append("\r\n");
    strOut.append(respXml.getXml());
    strOut.append("\r\n");

    // Save our exchange token to a file to be used for subsequent requests.
    respXml.SaveXml("qa_data/tokens/nav_exchange_token.xml");

    delete resp;

    // The result looks like this:

    // <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
    // <TokenExchangeResponse xmlns="http://schemas.nav.gov.hu/OSA/2.0/api" xmlns:ns2="http://schemas.nav.gov.hu/OSA/2.0/data">
    //     <header>
    //         <requestId>RID789246611489</requestId>
    //         <timestamp>2020-03-25T14:14:36Z</timestamp>
    //         <requestVersion>2.0</requestVersion>
    //         <headerVersion>1.0</headerVersion>
    //     </header>
    //     <result>
    //         <funcCode>OK</funcCode>
    //     </result>
    //     <software>
    //         <softwareId>123456789123456789</softwareId>
    //         <softwareName>string</softwareName>
    //         <softwareOperation>LOCAL_SOFTWARE</softwareOperation>
    //         <softwareMainVersion>string</softwareMainVersion>
    //         <softwareDevName>string</softwareDevName>
    //         <softwareDevContact>string</softwareDevContact>
    //         <softwareDevCountryCode>HU</softwareDevCountryCode>
    //         <softwareDevTaxNumber>string</softwareDevTaxNumber>
    //     </software>
    //     <encodedExchangeToken>2lR5v57Tl ... 9n4tIWCYgjKQ==</encodedExchangeToken>
    //     <tokenValidityFrom>2020-03-25T15:14:36.987+01:00</tokenValidityFrom>
    //     <tokenValidityTo>2020-03-25T15:19:36.987+01:00</tokenValidityTo>
    // </TokenExchangeResponse>

    // Use this online tool to generate parsing code from sample XML: 
    // Generate Parsing Code from XML

    // Chilkat functions returning "const char *" return a pointer to temporary internal memory owned and managed by Chilkat.
    // See this example explaining how this memory should be used: const char * functions.

    const char *TokenExchangeResponse_xmlns = respXml.getAttrValue("xmlns");
    const char *TokenExchangeResponse_xmlns_ns2 = respXml.getAttrValue("xmlns:ns2");
    const char *requestId = respXml.getChildContent("header|requestId");
    const char *timestamp = respXml.getChildContent("header|timestamp");
    const char *requestVersion = respXml.getChildContent("header|requestVersion");
    const char *headerVersion = respXml.getChildContent("header|headerVersion");
    const char *funcCode = respXml.getChildContent("result|funcCode");
    const char *softwareId = respXml.getChildContent("software|softwareId");
    const char *softwareName = respXml.getChildContent("software|softwareName");
    const char *softwareOperation = respXml.getChildContent("software|softwareOperation");
    const char *softwareMainVersion = respXml.getChildContent("software|softwareMainVersion");
    const char *softwareDevName = respXml.getChildContent("software|softwareDevName");
    const char *softwareDevContact = respXml.getChildContent("software|softwareDevContact");
    const char *softwareDevCountryCode = respXml.getChildContent("software|softwareDevCountryCode");
    const char *softwareDevTaxNumber = respXml.getChildContent("software|softwareDevTaxNumber");
    const char *encodedExchangeToken = respXml.getChildContent("encodedExchangeToken");
    const char *tokenValidityFrom = respXml.getChildContent("tokenValidityFrom");
    const char *tokenValidityTo = respXml.getChildContent("tokenValidityTo");


    SetDlgItemText(IDC_EDIT1,strOut.getUnicode());

    }