Sample code for 30+ languages & platforms
Unicode C

ZATCA Onboarding Get Compliance CSID

See more ZATCA Examples

Demonstrates sending a POST to get a compliance CSID, which is two parts: A binary security token, and a secret.

Chilkat Unicode C Downloads

Unicode C
#include <C_CkPemW.h>
#include <C_CkStringBuilderW.h>
#include <C_CkJsonObjectW.h>
#include <C_CkHttpW.h>
#include <C_CkHttpResponseW.h>

void ChilkatSample(void)
    {
    BOOL success;
    const wchar_t *otp;
    HCkPemW pem;
    HCkStringBuilderW sbCsrBase64;
    int numReplaced;
    const wchar_t *csrBase64;
    HCkJsonObjectW json;
    HCkHttpW http;
    HCkHttpResponseW resp;
    HCkJsonObjectW jsonResp;

    success = FALSE;

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // It is assumed you've already generated a CSR.
    // Also, you'll need an OTP code, valid for 1 hour, which is generated online in the Fatoora portal.  See 
    // https://zatca.gov.sa/ar/E-Invoicing/Introduction/Guidelines/Documents/E-invoicing%20Detailed%20Technical%20Guidelines.pdf

    // Manually replace this with the OTP code you interactively obtained in a browser session from the Fatoora portal.
    // The OTP code is valid for 1 hour.
    otp = L"123434";

    // You should already have a CSR in a file containing something that looks like this:

    // -----BEGIN CERTIFICATE REQUEST-----
    // MIIB5DCCAYsCAQAwTDELMAkGA1UEBhMCU0ExFTATBgNVBAsMDFJpeWFkIEJyYW5j
    // aDEQMA4GA1UECgwHQ29udG9zbzEUMBIGA1UEAwwLRUExMjM0NTY3ODkwVjAQBgcq
    // hkjOPQIBBgUrgQQACgNCAAQI6op+6GQ4Gmn9oy0DpGxX0lFtUIvj+4Jtnp0VyEsH
    // +ZO7lpgksbRC484R3fAsO0v+Ly24ZIUIOYEIAeJ1f6AooIHfMIHcBgkqhkiG9w0B
    // CQ4xgc4wgcswIQYJKwYBBAGCNxQCBBQTElpBVENBLUNvZGUtU2lnbmluZzCBpQYD
    // VR0RBIGdMIGapIGXMIGUMTswOQYDVQQEDDIxLVRTVHwyLVRTVHwzLWVkMjJmMWQ4
    // LWU2YTItMTExOC05YjU4LWQ5YThmMTFlNDQ1ZjEfMB0GCgmSJomT8ixkAQEMDzMx
    // MDEyMjM5MzUwMDAwMzENMAsGA1UEDAwEMTEwMDESMBAGA1UEGgwJTXlBZGRyZXNz
    // MREwDwYDVQQPDAhJbmR1c3RyeTAKBggqhkjOPQQDAgNHADBEAiBurm6KdAeHfXzt
    // h/jk8xSMBP4TAkkFrg+hWDhfI0/SuAIgJi8ectM7YwBIBCmf0tdFcVTU7GBbvjnK
    // xValZCAO39M=
    // -----END CERTIFICATE REQUEST-----

    pem = CkPemW_Create();
    success = CkPemW_LoadPemFile(pem,L"c:/aaworkarea/zatca/onboarding/taxpayer.csr",L"");
    if (success == FALSE) {
        wprintf(L"%s\n",CkPemW_lastErrorText(pem));
        CkPemW_Dispose(pem);
        return;
    }

    // Get the base64 from the CSR in a single line.
    sbCsrBase64 = CkStringBuilderW_Create();
    CkStringBuilderW_Append(sbCsrBase64,CkPemW_getEncodedItem(pem,L"csr",L"",L"base64",0));
    numReplaced = CkStringBuilderW_Replace(sbCsrBase64,L"\r",L"");
    numReplaced = CkStringBuilderW_Replace(sbCsrBase64,L"\n",L"");
    csrBase64 = CkStringBuilderW_getAsString(sbCsrBase64);
    wprintf(L"%s\n",csrBase64);

    json = CkJsonObjectW_Create();
    CkJsonObjectW_putEmitCompact(json,FALSE);
    CkJsonObjectW_UpdateSb(json,L"csr",sbCsrBase64);

    http = CkHttpW_Create();
    CkHttpW_putAccept(http,L"application/json");
    CkHttpW_SetRequestHeader(http,L"OTP",otp);
    CkHttpW_SetRequestHeader(http,L"Accept-Version",L"V2");
    resp = CkHttpResponseW_Create();
    success = CkHttpW_HttpJson(http,L"POST",L"https://gw-apic-gov.gazt.gov.sa/e-invoicing/core/compliance",json,L"application/json",resp);
    if (success == FALSE) {
        wprintf(L"%s\n",CkHttpW_lastErrorText(http));
        CkPemW_Dispose(pem);
        CkStringBuilderW_Dispose(sbCsrBase64);
        CkJsonObjectW_Dispose(json);
        CkHttpW_Dispose(http);
        CkHttpResponseW_Dispose(resp);
        return;
    }

    if (CkHttpResponseW_getStatusCode(resp) != 200) {
        wprintf(L"%s\n",CkHttpResponseW_bodyStr(resp));
        wprintf(L"response status code = %d\n",CkHttpResponseW_getStatusCode(resp));
        wprintf(L"Failed\n");
        CkPemW_Dispose(pem);
        CkStringBuilderW_Dispose(sbCsrBase64);
        CkJsonObjectW_Dispose(json);
        CkHttpW_Dispose(http);
        CkHttpResponseW_Dispose(resp);
        return;
    }

    jsonResp = CkJsonObjectW_Create();
    CkHttpResponseW_GetBodyJson(resp,jsonResp);

    CkJsonObjectW_putEmitCompact(jsonResp,FALSE);
    wprintf(L"JSON response:\n");
    wprintf(L"%s\n",CkJsonObjectW_emit(jsonResp));


    CkPemW_Dispose(pem);
    CkStringBuilderW_Dispose(sbCsrBase64);
    CkJsonObjectW_Dispose(json);
    CkHttpW_Dispose(http);
    CkHttpResponseW_Dispose(resp);
    CkJsonObjectW_Dispose(jsonResp);

    }