Swift

HMRC Validate Fraud Prevention Headers

See more HTTP Misc Examples

Demonstrates how to test (validate) HMRC fraud prevention headers. Swift

func chilkatTest() {
    var success: Bool = false

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    let rest = CkoRest()!

    success = rest.connect(hostname: "test-api.service.hmrc.gov.uk", port: 443, tls: true, autoReconnect: true)
    if success == false {
        print("\(rest.lastErrorText!)")
        return
    }

    // Load the previously fetched access token.
    let json = CkoJsonObject()!
    success = json.loadFile(path: "qa_data/tokens/hmrc.json")
    var accessToken: String? = json.string(of: "access_token")
    print("Using access toke: \(accessToken!)")

    let sbAuthHeaderValue = CkoStringBuilder()!
    sbAuthHeaderValue.append(value: "Bearer ")
    sbAuthHeaderValue.append(value: accessToken)

    rest.addHeader(name: "Accept", value: "application/vnd.hmrc.1.0+json")
    rest.addHeader(name: "Authorization", value: sbAuthHeaderValue.getAsString())

    // Add the fraud prevention headers.
    // See https://developer.service.hmrc.gov.uk/api-documentation/docs/fraud-prevention
    rest.addHeader(name: "gov-client-connection-method", value: "DESKTOP_APP_DIRECT")

    // This should be generated by an application and persistently stored on the device. The identifier should not expire.
    rest.addHeader(name: "gov-client-device-id", value: "beec798b-b366-47fa-b1f8-92cede14a1ce")

    // See https://developer.service.hmrc.gov.uk/api-documentation/docs/fraud-prevention
    rest.addHeader(name: "gov-client-user-ids", value: "os=user123")

    // Your local IP addresses (comma separated), such as addresses beginning with "192.168." or "172.16."
    rest.addHeader(name: "gov-client-local-ips", value: "172.16.16.23")
    // You'll need to find a way to get your MAC address.  Chilkat does not yet provide this ability...
    rest.addHeader(name: "gov-client-mac-addresses", value: "7C%3AD3%3A0A%3A25%3ADA%3A1C")

    rest.addHeader(name: "gov-client-timezone", value: "UTC+00:00")

    // You can probably just hard-code these so they're always the same with each request.
    rest.addHeader(name: "gov-client-window-size", value: "width=1256&height=800")
    rest.addHeader(name: "gov-client-screens", value: "width=1920&height=1080&scaling-factor=1&colour-depth=16")
    rest.addHeader(name: "gov-client-user-agent", value: "Windows/Server%202012 (Dell%20Inc./OptiPlex%20980)")
    rest.addHeader(name: "gov-vendor-version", value: "My%20Desktop%20Software=1.2.3.build4286")

    var responseStr: String? = rest.fullRequestNoBody(httpVerb: "GET", uriPath: "/test/fraud-prevention-headers/validate")
    if rest.lastMethodSuccess == false {
        print("\(rest.lastErrorText!)")
        return
    }

    // If the status code is 200, then the fraud prevention headers were validated.
    // The JSON response may include some warnings..
    print("Response status code = \(rest.responseStatusCode.intValue)")
    print("Response JSON body: ")
    print("\(responseStr!)")

}