(Objective-C) REST Basic Auth with Secure Strings

Demonstrates how to do REST Basic authentication using secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Chilkat Objective-C Library Downloads MAC OS X (Cocoa) Libs iOS Libs

#import <CkoJsonObject.h>
#import <CkoCrypt2.h>
#import <CkoSecureString.h>
#import <CkoRest.h>
#import <NSString.h>

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

BOOL success;

// Imagine we've previously saved our encrypted login and password within a JSON config file
// that contains this:

// {
//   "http_login": "mCrOmA7mBA7Au9RuJGb9hw==",
//   "http_password": "jJtiI9TgErTTpqBz9JtHBw=="
// }

CkoJsonObject *json = [[CkoJsonObject alloc] init];
[json LoadFile: @"qa_data/passwords/http.json"];

CkoCrypt2 *crypt = [[CkoCrypt2 alloc] init];

// These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
crypt.CryptAlgorithm = @"aes";
crypt.CipherMode = @"cbc";
crypt.KeyLength = [NSNumber numberWithInt:128];
[crypt SetEncodedKey: @"000102030405060708090A0B0C0D0E0F" encoding: @"hex"];
[crypt SetEncodedIV: @"000102030405060708090A0B0C0D0E0F" encoding: @"hex"];
crypt.EncodingMode = @"base64";

CkoSecureString *ssLogin = [[CkoSecureString alloc] init];
CkoSecureString *ssPassword = [[CkoSecureString alloc] init];

// Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
// a randomly generated session key.)
[crypt DecryptSecureENC: [json StringOf: @"http_login"] secureStr: ssLogin];
[crypt DecryptSecureENC: [json StringOf: @"http_password"] secureStr: ssPassword];

CkoRest *rest = [[CkoRest alloc] init];

// Connect to a REST server.
BOOL bTls = YES;
int port = 443;
BOOL bAutoReconnect = YES;
success = [rest Connect: @"chilkatsoft.com" port: [NSNumber numberWithInt: port] tls: bTls autoReconnect: bAutoReconnect];

// Cause the "Authorization: Basic ..." header to be added to HTTP requests
[rest SetAuthBasicSecure: ssLogin password: ssPassword];

NSString *responseJson = [rest FullRequestNoBody: @"GET" uriPath: @"/helloWorld.html"];
if (rest.LastMethodSuccess != YES) {
    NSLog(@"%@",rest.LastErrorText);
    return;
}

// Show the LastRequestHeader that was sent.
NSLog(@"%@",rest.LastRequestHeader);

// The LastRequestHeader looks like this:

// Host: chilkatsoft.com
// Authorization: Basic bXlIdHRwTG9naW46bXlIdHRwUGFzc3dvcmQ=