(PHP ActiveX) ZATCA Onboarding Get Compliance CSID

See more ZATCA Examples

Demonstrates sending a POST to get a compliance CSID, which is two parts: A binary security token, and a secret.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// It is assumed you've already generated a CSR.
// Also, you'll need an OTP code, valid for 1 hour, which is generated online in the Fatoora portal.  See 
// https://zatca.gov.sa/ar/E-Invoicing/Introduction/Guidelines/Documents/E-invoicing%20Detailed%20Technical%20Guidelines.pdf

// Manually replace this with the OTP code you interactively obtained in a browser session from the Fatoora portal.
// The OTP code is valid for 1 hour.
$otp = '123434';

// You should already have a CSR in a file containing something that looks like this:

// -----BEGIN CERTIFICATE REQUEST-----
// MIIB5DCCAYsCAQAwTDELMAkGA1UEBhMCU0ExFTATBgNVBAsMDFJpeWFkIEJyYW5j
// aDEQMA4GA1UECgwHQ29udG9zbzEUMBIGA1UEAwwLRUExMjM0NTY3ODkwVjAQBgcq
// hkjOPQIBBgUrgQQACgNCAAQI6op+6GQ4Gmn9oy0DpGxX0lFtUIvj+4Jtnp0VyEsH
// +ZO7lpgksbRC484R3fAsO0v+Ly24ZIUIOYEIAeJ1f6AooIHfMIHcBgkqhkiG9w0B
// CQ4xgc4wgcswIQYJKwYBBAGCNxQCBBQTElpBVENBLUNvZGUtU2lnbmluZzCBpQYD
// VR0RBIGdMIGapIGXMIGUMTswOQYDVQQEDDIxLVRTVHwyLVRTVHwzLWVkMjJmMWQ4
// LWU2YTItMTExOC05YjU4LWQ5YThmMTFlNDQ1ZjEfMB0GCgmSJomT8ixkAQEMDzMx
// MDEyMjM5MzUwMDAwMzENMAsGA1UEDAwEMTEwMDESMBAGA1UEGgwJTXlBZGRyZXNz
// MREwDwYDVQQPDAhJbmR1c3RyeTAKBggqhkjOPQQDAgNHADBEAiBurm6KdAeHfXzt
// h/jk8xSMBP4TAkkFrg+hWDhfI0/SuAIgJi8ectM7YwBIBCmf0tdFcVTU7GBbvjnK
// xValZCAO39M=
// -----END CERTIFICATE REQUEST-----

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Pem')
$pem = new COM("Chilkat.Pem");
$success = $pem->LoadPemFile('c:/aaworkarea/zatca/onboarding/taxpayer.csr','');
if ($success == 0) {
    print $pem->LastErrorText . "\n";
    exit;
}

// Get the base64 from the CSR in a single line.
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.StringBuilder')
$sbCsrBase64 = new COM("Chilkat.StringBuilder");
$sbCsrBase64->Append($pem->getEncodedItem('csr','','base64',0));
$numReplaced = $sbCsrBase64->Replace('\r','');
$numReplaced = $sbCsrBase64->Replace('\n','');
$csrBase64 = $sbCsrBase64->getAsString();
print $csrBase64 . "\n";

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.JsonObject')
$json = new COM("Chilkat.JsonObject");
$json->EmitCompact = 0;
$json->UpdateSb('csr',$sbCsrBase64);

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Http')
$http = new COM("Chilkat.Http");
$http->Accept = 'application/json';
$http->SetRequestHeader('OTP',$otp);
$http->SetRequestHeader('Accept-Version','V2');
// resp is a Chilkat.HttpResponse
$resp = $http->PostJson3('https://gw-apic-gov.gazt.gov.sa/e-invoicing/core/compliance','application/json',$json);
if ($http->LastMethodSuccess == 0) {
    print $http->LastErrorText . "\n";
    exit;
}

if ($resp->StatusCode != 200) {
    print $resp->BodyStr . "\n";
    print 'response status code = ' . $resp->StatusCode . "\n";
    print 'Failed' . "\n";

    exit;
}

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.JsonObject')
$jsonResp = new COM("Chilkat.JsonObject");
$resp->GetBodyJson($jsonResp);

$jsonResp->EmitCompact = 0;
print 'JSON response:' . "\n";
print $jsonResp->emit() . "\n";


?>