(Swift 3,4,5...) Rabobank GET /v3/accounts

Demonstrates a call to a Rabobank API. Specifically this makes a call to the "Accounts AIS sb" API to deliver all the consented payments accounts for a specific Rabobank customer.

(This includes source code to for signing requests for PSD2 APIs)

For more information, see https://developer-sandbox.rabobank.nl/reference/accounts-ais-sb/3-0-8

Chilkat Downloads for the Swift Programming Language MAC OS X (Cocoa) Objective-C/Swift Libs iOS Objective-C/Swift Libs

func chilkatTest() {
    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    let http = CkoHttp()!
    var success: Bool

    // Implements the following CURL command:

    // curl --request GET \
    //   --url https://api-sandbox.rabobank.nl/openapi/sandbox/payments/account-information/ais/v3/accounts \
    //   --header 'accept: application/json' \
    //   --header 'authorization: Bearer REPLACE_BEARER_TOKEN' \
    //   --header 'date: REPLACE_THIS_VALUE' \
    //   --header 'digest: REPLACE_THIS_VALUE' \
    //   --header 'psu-ip-address: OPTIONAL' \
    //   --header 'signature: REPLACE_THIS_VALUE' \
    //   --header 'tpp-signature-certificate: MIIDkDCCAnigA ... cwE6gUl0rMA==' \
    //   --header 'x-ibm-client-id: Client ID' \
    //   --header 'x-request-id: REPLACE_THIS_VALUE'

    // Load the previously fetched OAuth2 access token.
    let jsonToken = CkoJsonObject()!
    success = jsonToken.loadFile("qa_data/tokens/rabobank.json")
    if success == false {
        print("\(jsonToken.lastErrorText!)")
        return
    }

    // This adds the "authorization: Bearer REPLACE_BEARER_TOKEN" header.
    http.authToken = jsonToken.string(of: "access_token")

    // This is the TTP Signature certificate: The certificate used for signing the request.
    let sbTppCert = CkoStringBuilder()!
    sbTppCert.append("MIIDkDCCAnigAwIBAgIEWs3AJDANBgkqhkiG9w0BAQsFADCBiTELMAkGA1UEBhMC")
    sbTppCert.append("TkwxEDAOBgNVBAgMB1V0cmVjaHQxEDAOBgNVBAcMB1V0cmVjaHQxETAPBgNVBAoM")
    sbTppCert.append("CFJhYm9iYW5rMRwwGgYDVQQLDBNPbmxpbmUgVHJhbnNhY3Rpb25zMSUwIwYDVQQD")
    sbTppCert.append("DBxQU0QyIEFQSSBQSSBTZXJ2aWNlcyBTYW5kYm94MB4XDTE4MDQxMTA3NTgyOFoX")
    sbTppCert.append("DTIzMDQxMTA3NTgyOFowgYkxCzAJBgNVBAYTAk5MMRAwDgYDVQQIDAdVdHJlY2h0")
    sbTppCert.append("MRAwDgYDVQQHDAdVdHJlY2h0MREwDwYDVQQKDAhSYWJvYmFuazEcMBoGA1UECwwT")
    sbTppCert.append("T25saW5lIFRyYW5zYWN0aW9uczElMCMGA1UEAwwcUFNEMiBBUEkgUEkgU2Vydmlj")
    sbTppCert.append("ZXMgU2FuZGJveDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANoAjqGW")
    sbTppCert.append("UgCIm2F+0sBSEwLal+T3u+uldLikpxHCB8iL1GD7FrRjcA+MVsxhvHly7vRsHK+t")
    sbTppCert.append("QyMSaeK782RHpY33qxPLc8LmoQLb2EuiQxXj9POYkYBQ74qkrZnvKVlR3WoyQWeD")
    sbTppCert.append("OXnSY2wbNFfkP8ET4ElwyuIIEriwYhab0OIrnnrO8X82/SPZxHwEd3aQjQ6uhiw8")
    sbTppCert.append("paDspJbS5WjEfuwY16KVVUYlhbtAwGjvc6aK0NBm+LH9fMLpAE6gfGZNy0gzMDor")
    sbTppCert.append("VNbkQK1IoAGD8p9ZHdB0F3FwkILEjUiQW6nK+/fKDNJ0TBbpgZUpY8bR460qzxKd")
    sbTppCert.append("eZ1yPDqX2Cjh6fkCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAYL4iD6noMJAt63kD")
    sbTppCert.append("ED4RB2mII/lssvHhcxuDpOm3Ims9urubFWEpvV5TgIBAxy9PBinOdjhO1kGJJnYi")
    sbTppCert.append("7F1jv1qnZwTV1JhYbvxv3+vk0jaiu7Ew7G3ASlzruXyMhN6t6jk9MpaWGl5Uw1T+")
    sbTppCert.append("gNRUcWQRR44g3ahQRIS/UHkaV+vcpOa8j186/1X0ULHfbcVQk4LMmJeXqNs8sBAU")
    sbTppCert.append("dKU/c6ssvj8jfJ4SfrurcBhY5UBTOdQOXTPY85aU3iFloerx7Oi9EHewxInOrU5X")
    sbTppCert.append("zqqTz2AQPXezexVeAQxP27lzqCmYC7CFiam6QBr06VebkmnPLfs76n8CDc1cwE6g")
    sbTppCert.append("Ul0rMA==")
    http.setRequestHeader("tpp-signature-certificate", value: sbTppCert.getAsString())

    // ----------------------------------------------------------------
    // We're not going to add the psu-ip-address header in this example.

    // ----------------------------------------------------------------
    // X-Request-ID header...
    // Generate a UUID v4.
    let crypt = CkoCrypt2()!
    var xRequestId: String? = crypt.generateUuid()
    http.setRequestHeader("x-request-id", value: xRequestId)

    // ----------------------------------------------------------------
    // Date header...
    let dt = CkoDateTime()!
    dt.setFromCurrentSystemTime()
    var dateHdrVal: String? = dt.getAsRfc822(false)
    // The desire date/time format is the "RFC822" format.
    http.setRequestHeader("Date", value: dateHdrVal)

    // ----------------------------------------------------------------
    // Digest header...
    crypt.hashAlgorithm = "SHA256"
    crypt.encodingMode = "base64"
    // A GET request has no HTTP request body.  Therefore the payload is the empty string.
    var payload: String? = ""
    var payloadDigest: String? = crypt.hashStringENC(payload)
    let sbDigestHdrVal = CkoStringBuilder()!
    sbDigestHdrVal.append("SHA-256=")
    sbDigestHdrVal.append(payloadDigest)
    http.setRequestHeader("digest", value: sbDigestHdrVal.getAsString())

    // ----------------------------------------------------------------
    // The HTTP request needs to be signed for PSD2 API's...
    // Create the signing string (to use in signing the HTTP request).
    // See https://developer.rabobank.nl/signing-requests-psd2-apis
    // 
    // For "account information" HTTP requests, we must use the following headers in the signing string.
    //    date
    //    digest
    //    x-request-id

    let sbStringToSign = CkoStringBuilder()!
    sbStringToSign.append("date: ")
    sbStringToSign.appendLine(dateHdrVal, crlf: false)
    sbStringToSign.append("digest: ")
    sbStringToSign.appendLine(sbDigestHdrVal.getAsString(), crlf: false)
    sbStringToSign.append("x-request-id: ")
    sbStringToSign.append(xRequestId)

    // ----------------------------------------------------------------
    // Sign with our private key...
    let sbPrivKey = CkoStringBuilder()!
    sbPrivKey.append("MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDaAI6hllIAiJth")
    sbPrivKey.append("ftLAUhMC2pfk97vrpXS4pKcRwgfIi9Rg+xa0Y3APjFbMYbx5cu70bByvrUMjEmni")
    sbPrivKey.append("u/NkR6WN96sTy3PC5qEC29hLokMV4/TzmJGAUO+KpK2Z7ylZUd1qMkFngzl50mNs")
    sbPrivKey.append("GzRX5D/BE+BJcMriCBK4sGIWm9DiK556zvF/Nv0j2cR8BHd2kI0OroYsPKWg7KSW")
    sbPrivKey.append("0uVoxH7sGNeilVVGJYW7QMBo73OmitDQZvix/XzC6QBOoHxmTctIMzA6K1TW5ECt")
    sbPrivKey.append("SKABg/KfWR3QdBdxcJCCxI1IkFupyvv3ygzSdEwW6YGVKWPG0eOtKs8SnXmdcjw6")
    sbPrivKey.append("l9go4en5AgMBAAECggEAB8nsTqalwGIhFw8mbXuhNUFlGuek/arYLD6pv28swwQH")
    sbPrivKey.append("7v0ZlxFUcCHF+iBl0PsDwZTZQ4ePtgGS6ehoLkWHCzb1lEv5E1YVG5qKNE2UUwRl")
    sbPrivKey.append("fIyPakO6AzyV/UF3uzq7C+/GuXGNTKZxKewg5yD/DCFvKoCOpxu9u36FyqP/hw0S")
    sbPrivKey.append("ADVlmp35/zoPDPZzu1j4FiCo0pJ9LwJcHxeJHopNAKDw9k6I4z/grskdgupsGzK2")
    sbPrivKey.append("BiGiQ/+wmmO68/6Xa6KWfpr1PQ6ODJHgzZsdGCVi6Ebaqlj6BbsYWxP6h3lrsGt+")
    sbPrivKey.append("LmHBaN2jCD6cDp+lihqFgnm8hfdv0lmbPilp71EDfwKBgQD6U8PBzZtN8yXm5WuS")
    sbPrivKey.append("NL+/8q5GjNmeTJBSo1gM6Y8vOT4QAE147LbVuVBDwyHPoSrNejePae6Q14PswjBy")
    sbPrivKey.append("T7B8DZ0OeQyGa3trrFg/ib7Vv4ZMvJqX9+WzBrzZsxTg7oCKHzmCR4vIRItKHH3z")
    sbPrivKey.append("Wnnhqlo8ic2AZ2O43cdJosbO1wKBgQDe8UODOLu0vnHohOKeUqF3w/ZOB2+83/js")
    sbPrivKey.append("YyUbSkzsGvHIwTjObuMUFTQvdMZ6IkIyJdfnDZIbvlBSD8tzL5iKFTNCK2nL1i4G")
    sbPrivKey.append("iFr0CYLaHAlhJ5GEbTrTMDoJeBPerZq83HPrSa/Wb0xO18QTWsoVQPFfPFbbcQyI")
    sbPrivKey.append("9ryJ2iIDrwKBgQC6kuAefG46ZPVk6K2KZUJdgDUgZC52a75NuW0RAqszmUiGiJM1")
    sbPrivKey.append("g8ip9tq6BqAWrprGV0c93shusBKlzf5p1LdHXqYmeVY6gbWVhPipMrNHgN5KJ3BZ")
    sbPrivKey.append("v+w1yNnMsErpcxne2HL2hPjMJTpj3GSLkm2xIlTrNhIyl9ydlr7IRUhENQKBgQCv")
    sbPrivKey.append("i6HxbXa/90WSJTCcIcxqla8X+dsOCf3jhJ3vQy4Wq5C+1wZ35fCAG8Ifq/+so9Uj")
    sbPrivKey.append("z5CVqqXlmpF8TFuSs2OVNuRJsg14J4nOMwgLKIIUZAcurQ10DN5I9Kx+UEK1EFXL")
    sbPrivKey.append("aHsORdNjMfgQDO2jn9WHrr9gkg6CdB2+qyoCEfS+mQKBgBW08lcy9V5RzRWb/v/j")
    sbPrivKey.append("xsc7ovmgAhCJhDeV7dPbx4HbFeoQJlbA8g1thdcFlcatSGyNDbvNE1GPSd4NhkpR")
    sbPrivKey.append("Y6Hfv53kdEzjVkEtU8lUdL7HNVJqX7bU7oZlfbYcwxWQ1Gg8C1oLIAyEt71slQtd")
    sbPrivKey.append("RiNYBRZTQe2F0wxbXnuUqLAw")

    let privKey = CkoPrivateKey()!
    success = privKey.loadPem(sbPrivKey.getAsString())
    if success == false {
        print("\(privKey.lastErrorText!)")
        return
    }

    let rsa = CkoRsa()!
    success = rsa.importPrivateKeyObj(privKey)
    if success == false {
        print("\(rsa.lastErrorText!)")
        return
    }

    rsa.encodingMode = "base64"
    var b64Signature: String? = rsa.signStringENC(sbStringToSign.getAsString(), hashAlg: "SHA256")

    // ----------------------------------------------------------------
    // Add the "signature" header.
    // 
    // The signature header will look like this:
    // signature: keyId="1523433508",algorithm="rsa-sha512",headers="date digest x-request-id",signature="y5o7gKxmfA6AT6...blE1A9Q=="
    // 
    // The keyId is the serial number of the certificate as defined in 'TPP-Signing-Certificate' header, the format should be Integer not hex. 
    let cert = CkoCert()!
    success = cert.setFromEncoded(sbTppCert.getAsString())
    if success == false {
        print("\(cert.lastErrorText!)")
        return
    }

    let sbSigHdrVal = CkoStringBuilder()!
    sbSigHdrVal.append("keyId=\"")
    sbSigHdrVal.append(cert.serialDecimal)
    sbSigHdrVal.append("\",")
    sbSigHdrVal.append("algorithm=\"rsa-sha256\",")
    sbSigHdrVal.append("headers=\"date digest x-request-id\",")
    sbSigHdrVal.append("signature=\"")
    sbSigHdrVal.append(b64Signature)
    sbSigHdrVal.append("\"")

    http.setRequestHeader("signature", value: sbSigHdrVal.getAsString())

    // ----------------------------------------------------------------
    // Add remaining headers...

    http.setRequestHeader("x-ibm-client-id", value: "YOUR_APP_CLIENT_ID")
    http.setRequestHeader("accept", value: "application/json")

    // ----------------------------------------------------------------
    // Add our certificate and key for mutual TLS 
    // (provide a registered X509 client certificate during TLS handhake)

    let tlsCert = CkoCert()!
    success = tlsCert.load(fromFile: "qa_data/certs_and_keys/ING/example_client_tls.cer")
    if success == false {
        print("\(tlsCert.lastErrorText!)")
        return
    }

    let bdPrivKey = CkoBinData()!
    success = bdPrivKey.loadFile("qa_data/certs_and_keys/ING/example_client_tls.key")
    if success == false {
        print("Failed to load example_client_tls.key")
        return
    }

    // The OAuth 2.0 client_id for these certificates is e77d776b-90af-4684-bebc-521e5b2614dd. 
    // Please note down this client_id since you will need it in the next steps to call the API.

    let tlsPrivKey = CkoPrivateKey()!
    success = tlsPrivKey.loadAnyFormat(bdPrivKey, password: "")
    if success == false {
        print("\(tlsPrivKey.lastErrorText!)")
        return
    }

    // Associate the private key with the certificate.
    success = tlsCert.setPrivateKey(tlsPrivKey)
    if success == false {
        print("\(tlsCert.lastErrorText!)")
        return
    }

    success = http.setSslClientCert(tlsCert)
    if success == false {
        print("\(http.lastErrorText!)")
        return
    }

    // ----------------------------------------------------------------
    // Finally, send the request...

    let sbResponseBody = CkoStringBuilder()!
    success = http.quickGetSb("https://api-sandbox.rabobank.nl/openapi/sandbox/payments/account-information/ais/v3/accounts", sbContent: sbResponseBody)
    if success == false {
        print("\(http.lastErrorText!)")
        print("\(sbResponseBody.getAsString()!)")
        return
    }

    let jResp = CkoJsonObject()!
    jResp.loadSb(sbResponseBody)
    jResp.emitCompact = false

    print("Response Body:")
    print("\(jResp.emit()!)")

    var respStatusCode: Int = http.lastStatus.intValue
    print("Response Status Code = \(respStatusCode)")
    if respStatusCode >= 400 {
        print("Response Header:")
        print("\(http.lastHeader!)")
        print("Failed.")
        return
    }

    // Sample JSON response:
    // (Sample code for parsing the JSON response is shown below)

    // {
    //   "accounts": [
    //     {
    //       "_links": {
    //         "account": "/v3/accounts/dW9od2VIVUhGVypIZHVpaGRhdWR3OGRoY",
    //         "balances": "/v3/accounts/dW9od2VIVUhGVypIZHVpaGRhdWR3OGRoY/balances",
    //         "transactions": "/v3/accounts/dW9od2VIVUhGVypIZHVpaGRhdWR3OGRoY/transactions"
    //       },
    //       "currency": "EUR",
    //       "iban": "NL05RABO0812836782",
    //       "name": "Rosie Roy",
    //       "resourceId": "dW9od2VIVUhGVypIZHVpaGRhdWR3OGRoY",
    //       "status": "enabled"
    //     }
    //   ]
    // }

    // Sample code for parsing the JSON response...
    // Use the following online tool to generate parsing code from sample JSON:
    // Generate Parsing Code from JSON

    var v_linksAccount: String?
    var v_linksBalances: String?
    var v_linksTransactions: String?
    var currency: String?
    var iban: String?
    var name: String?
    var resourceId: String?
    var status: String?

    var i: Int = 0
    var count_i: Int = jResp.size(ofArray: "accounts").intValue
    while i < count_i {
        jResp.i = i
        v_linksAccount = jResp.string(of: "accounts[i]._links.account")
        v_linksBalances = jResp.string(of: "accounts[i]._links.balances")
        v_linksTransactions = jResp.string(of: "accounts[i]._links.transactions")
        currency = jResp.string(of: "accounts[i].currency")
        iban = jResp.string(of: "accounts[i].iban")
        name = jResp.string(of: "accounts[i].name")
        resourceId = jResp.string(of: "accounts[i].resourceId")
        status = jResp.string(of: "accounts[i].status")
        i = i + 1
    }


}