Xbase++

ZATCA Onboarding Get Compliance CSID

See more ZATCA Examples

Demonstrates sending a POST to get a compliance CSID, which is two parts: A binary security token, and a secret. Xbase++

LOCAL nSuccess
LOCAL cOtp
LOCAL oPem
LOCAL oSbCsrBase64
LOCAL nNumReplaced
LOCAL cCsrBase64
LOCAL oJson
LOCAL oHttp
LOCAL oResp
LOCAL oJsonResp

nSuccess := 0

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

//  It is assumed you've already generated a CSR.
//  Also, you'll need an OTP code, valid for 1 hour, which is generated online in the Fatoora portal.  See 
//  https://zatca.gov.sa/ar/E-Invoicing/Introduction/Guidelines/Documents/E-invoicing%20Detailed%20Technical%20Guidelines.pdf

//  Manually replace this with the OTP code you interactively obtained in a browser session from the Fatoora portal.
//  The OTP code is valid for 1 hour.
cOtp := "123434"

//  You should already have a CSR in a file containing something that looks like this:

//  -----BEGIN CERTIFICATE REQUEST-----
//  MIIB5DCCAYsCAQAwTDELMAkGA1UEBhMCU0ExFTATBgNVBAsMDFJpeWFkIEJyYW5j
//  aDEQMA4GA1UECgwHQ29udG9zbzEUMBIGA1UEAwwLRUExMjM0NTY3ODkwVjAQBgcq
//  hkjOPQIBBgUrgQQACgNCAAQI6op+6GQ4Gmn9oy0DpGxX0lFtUIvj+4Jtnp0VyEsH
//  +ZO7lpgksbRC484R3fAsO0v+Ly24ZIUIOYEIAeJ1f6AooIHfMIHcBgkqhkiG9w0B
//  CQ4xgc4wgcswIQYJKwYBBAGCNxQCBBQTElpBVENBLUNvZGUtU2lnbmluZzCBpQYD
//  VR0RBIGdMIGapIGXMIGUMTswOQYDVQQEDDIxLVRTVHwyLVRTVHwzLWVkMjJmMWQ4
//  LWU2YTItMTExOC05YjU4LWQ5YThmMTFlNDQ1ZjEfMB0GCgmSJomT8ixkAQEMDzMx
//  MDEyMjM5MzUwMDAwMzENMAsGA1UEDAwEMTEwMDESMBAGA1UEGgwJTXlBZGRyZXNz
//  MREwDwYDVQQPDAhJbmR1c3RyeTAKBggqhkjOPQQDAgNHADBEAiBurm6KdAeHfXzt
//  h/jk8xSMBP4TAkkFrg+hWDhfI0/SuAIgJi8ectM7YwBIBCmf0tdFcVTU7GBbvjnK
//  xValZCAO39M=
//  -----END CERTIFICATE REQUEST-----

oPem := CreateObject("Chilkat.Pem")
nSuccess := oPem:LoadPemFile("c:/aaworkarea/zatca/onboarding/taxpayer.csr", "")
IF (nSuccess == 0)
    ? oPem:LastErrorText
    oPem:destroy()
    RETURN
ENDIF

//  Get the base64 from the CSR in a single line.
oSbCsrBase64 := CreateObject("Chilkat.StringBuilder")
oSbCsrBase64:Append(oPem:GetEncodedItem("csr", "", "base64", 0))
nNumReplaced := oSbCsrBase64:Replace(Chr(13), "")
nNumReplaced := oSbCsrBase64:Replace(Chr(10), "")
cCsrBase64 := oSbCsrBase64:GetAsString()
? cCsrBase64

oJson := CreateObject("Chilkat.JsonObject")
oJson:EmitCompact := 0
oJson:UpdateSb("csr", oSbCsrBase64)

oHttp := CreateObject("Chilkat.Http")
oHttp:Accept := "application/json"
oHttp:SetRequestHeader("OTP", cOtp)
oHttp:SetRequestHeader("Accept-Version", "V2")
oResp := CreateObject("Chilkat.HttpResponse")
nSuccess := oHttp:HttpJson("POST", "https://gw-apic-gov.gazt.gov.sa/e-invoicing/core/compliance", oJson, "application/json", oResp)
IF (nSuccess == 0)
    ? oHttp:LastErrorText
    oPem:destroy()
    oSbCsrBase64:destroy()
    oJson:destroy()
    oHttp:destroy()
    oResp:destroy()
    RETURN
ENDIF

IF (oResp:StatusCode != 200)
    ? oResp:BodyStr
    ? "response status code = " + Str(oResp:StatusCode)
    ? "Failed"
    oPem:destroy()
    oSbCsrBase64:destroy()
    oJson:destroy()
    oHttp:destroy()
    oResp:destroy()
    RETURN
ENDIF

oJsonResp := CreateObject("Chilkat.JsonObject")
oResp:GetBodyJson(oJsonResp)

oJsonResp:EmitCompact := 0
? "JSON response:"
? oJsonResp:Emit()

oPem:destroy()
oSbCsrBase64:destroy()
oJson:destroy()
oHttp:destroy()
oResp:destroy()
oJsonResp:destroy()