Zig Requires Chilkat v11.0.0+
Zig
Rabobank GET /v3/accounts
See more Rabobank Examples
Demonstrates a call to a Rabobank API. Specifically this makes a call to the "Accounts AIS sb" API to deliver all the consented payments accounts for a specific Rabobank customer.(This includes source code to for signing requests for PSD2 APIs)
Chilkat Zig Downloads
const std = @import("std");
const chilkat = @import("chilkat");
pub fn main(init: std.process.Init) !void {
const alloc = init.arena.allocator();
// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.
const http = try chilkat.Http.init();
defer http.deinit();
// Implements the following CURL command:
// curl --request GET \
// --url https://api-sandbox.rabobank.nl/openapi/sandbox/payments/account-information/ais/v3/accounts \
// --header 'accept: application/json' \
// --header 'authorization: Bearer REPLACE_BEARER_TOKEN' \
// --header 'date: REPLACE_THIS_VALUE' \
// --header 'digest: REPLACE_THIS_VALUE' \
// --header 'psu-ip-address: OPTIONAL' \
// --header 'signature: REPLACE_THIS_VALUE' \
// --header 'tpp-signature-certificate: MIIDkDCCAnigA ... cwE6gUl0rMA==' \
// --header 'x-ibm-client-id: Client ID' \
// --header 'x-request-id: REPLACE_THIS_VALUE'
// Load the previously fetched OAuth2 access token.
const json_token = try chilkat.JsonObject.init();
defer json_token.deinit();
json_token.loadFile("qa_data/tokens/rabobank.json") catch {
std.debug.print("{s}\n", .{try json_token.getLastErrorText(alloc)});
return;
};
// This adds the "authorization: Bearer REPLACE_BEARER_TOKEN" header.
http.setAuthToken(try json_token.stringOf(alloc, "access_token"));
// This is the TTP Signature certificate: The certificate used for signing the request.
const sb_tpp_cert = try chilkat.StringBuilder.init();
defer sb_tpp_cert.deinit();
sb_tpp_cert.append("MIIDkDCCAnigAwIBAgIEWs3AJDANBgkqhkiG9w0BAQsFADCBiTELMAkGA1UEBhMC") catch {};
sb_tpp_cert.append("TkwxEDAOBgNVBAgMB1V0cmVjaHQxEDAOBgNVBAcMB1V0cmVjaHQxETAPBgNVBAoM") catch {};
sb_tpp_cert.append("CFJhYm9iYW5rMRwwGgYDVQQLDBNPbmxpbmUgVHJhbnNhY3Rpb25zMSUwIwYDVQQD") catch {};
sb_tpp_cert.append("DBxQU0QyIEFQSSBQSSBTZXJ2aWNlcyBTYW5kYm94MB4XDTE4MDQxMTA3NTgyOFoX") catch {};
sb_tpp_cert.append("DTIzMDQxMTA3NTgyOFowgYkxCzAJBgNVBAYTAk5MMRAwDgYDVQQIDAdVdHJlY2h0") catch {};
sb_tpp_cert.append("MRAwDgYDVQQHDAdVdHJlY2h0MREwDwYDVQQKDAhSYWJvYmFuazEcMBoGA1UECwwT") catch {};
sb_tpp_cert.append("T25saW5lIFRyYW5zYWN0aW9uczElMCMGA1UEAwwcUFNEMiBBUEkgUEkgU2Vydmlj") catch {};
sb_tpp_cert.append("ZXMgU2FuZGJveDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANoAjqGW") catch {};
sb_tpp_cert.append("UgCIm2F+0sBSEwLal+T3u+uldLikpxHCB8iL1GD7FrRjcA+MVsxhvHly7vRsHK+t") catch {};
sb_tpp_cert.append("QyMSaeK782RHpY33qxPLc8LmoQLb2EuiQxXj9POYkYBQ74qkrZnvKVlR3WoyQWeD") catch {};
sb_tpp_cert.append("OXnSY2wbNFfkP8ET4ElwyuIIEriwYhab0OIrnnrO8X82/SPZxHwEd3aQjQ6uhiw8") catch {};
sb_tpp_cert.append("paDspJbS5WjEfuwY16KVVUYlhbtAwGjvc6aK0NBm+LH9fMLpAE6gfGZNy0gzMDor") catch {};
sb_tpp_cert.append("VNbkQK1IoAGD8p9ZHdB0F3FwkILEjUiQW6nK+/fKDNJ0TBbpgZUpY8bR460qzxKd") catch {};
sb_tpp_cert.append("eZ1yPDqX2Cjh6fkCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAYL4iD6noMJAt63kD") catch {};
sb_tpp_cert.append("ED4RB2mII/lssvHhcxuDpOm3Ims9urubFWEpvV5TgIBAxy9PBinOdjhO1kGJJnYi") catch {};
sb_tpp_cert.append("7F1jv1qnZwTV1JhYbvxv3+vk0jaiu7Ew7G3ASlzruXyMhN6t6jk9MpaWGl5Uw1T+") catch {};
sb_tpp_cert.append("gNRUcWQRR44g3ahQRIS/UHkaV+vcpOa8j186/1X0ULHfbcVQk4LMmJeXqNs8sBAU") catch {};
sb_tpp_cert.append("dKU/c6ssvj8jfJ4SfrurcBhY5UBTOdQOXTPY85aU3iFloerx7Oi9EHewxInOrU5X") catch {};
sb_tpp_cert.append("zqqTz2AQPXezexVeAQxP27lzqCmYC7CFiam6QBr06VebkmnPLfs76n8CDc1cwE6g") catch {};
sb_tpp_cert.append("Ul0rMA==") catch {};
http.setRequestHeader("tpp-signature-certificate", try sb_tpp_cert.getAsString(alloc));
// ----------------------------------------------------------------
// We're not going to add the psu-ip-address header in this example.
// ----------------------------------------------------------------
// X-Request-ID header...
// Generate a UUID v4.
const crypt = try chilkat.Crypt2.init();
defer crypt.deinit();
const x_request_id = try crypt.generateUuid(alloc);
http.setRequestHeader("x-request-id", x_request_id);
// ----------------------------------------------------------------
// Date header...
const dt = try chilkat.DateTime.init();
defer dt.deinit();
dt.setFromCurrentSystemTime() catch {};
const date_hdr_val = try dt.getAsRfc822(alloc, false);
// The desire date/time format is the "RFC822" format.
http.setRequestHeader("Date", date_hdr_val);
// ----------------------------------------------------------------
// Digest header...
crypt.setHashAlgorithm("SHA256");
crypt.setEncodingMode("base64");
// A GET request has no HTTP request body. Therefore the payload is the empty string.
const payload = "";
const payload_digest = try crypt.hashStringENC(alloc, payload);
const sb_digest_hdr_val = try chilkat.StringBuilder.init();
defer sb_digest_hdr_val.deinit();
sb_digest_hdr_val.append("SHA-256=") catch {};
sb_digest_hdr_val.append(payload_digest) catch {};
http.setRequestHeader("digest", try sb_digest_hdr_val.getAsString(alloc));
// ----------------------------------------------------------------
// The HTTP request needs to be signed for PSD2 API's...
// Create the signing string (to use in signing the HTTP request).
// See https://developer.rabobank.nl/signing-requests-psd2-apis
//
// For "account information" HTTP requests, we must use the following headers in the signing string.
// date
// digest
// x-request-id
const sb_string_to_sign = try chilkat.StringBuilder.init();
defer sb_string_to_sign.deinit();
sb_string_to_sign.append("date: ") catch {};
sb_string_to_sign.appendLine(date_hdr_val, false) catch {};
sb_string_to_sign.append("digest: ") catch {};
sb_string_to_sign.appendLine(try sb_digest_hdr_val.getAsString(alloc), false) catch {};
sb_string_to_sign.append("x-request-id: ") catch {};
sb_string_to_sign.append(x_request_id) catch {};
// ----------------------------------------------------------------
// Sign with our private key...
const sb_priv_key = try chilkat.StringBuilder.init();
defer sb_priv_key.deinit();
sb_priv_key.append("MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDaAI6hllIAiJth") catch {};
sb_priv_key.append("ftLAUhMC2pfk97vrpXS4pKcRwgfIi9Rg+xa0Y3APjFbMYbx5cu70bByvrUMjEmni") catch {};
sb_priv_key.append("u/NkR6WN96sTy3PC5qEC29hLokMV4/TzmJGAUO+KpK2Z7ylZUd1qMkFngzl50mNs") catch {};
sb_priv_key.append("GzRX5D/BE+BJcMriCBK4sGIWm9DiK556zvF/Nv0j2cR8BHd2kI0OroYsPKWg7KSW") catch {};
sb_priv_key.append("0uVoxH7sGNeilVVGJYW7QMBo73OmitDQZvix/XzC6QBOoHxmTctIMzA6K1TW5ECt") catch {};
sb_priv_key.append("SKABg/KfWR3QdBdxcJCCxI1IkFupyvv3ygzSdEwW6YGVKWPG0eOtKs8SnXmdcjw6") catch {};
sb_priv_key.append("l9go4en5AgMBAAECggEAB8nsTqalwGIhFw8mbXuhNUFlGuek/arYLD6pv28swwQH") catch {};
sb_priv_key.append("7v0ZlxFUcCHF+iBl0PsDwZTZQ4ePtgGS6ehoLkWHCzb1lEv5E1YVG5qKNE2UUwRl") catch {};
sb_priv_key.append("fIyPakO6AzyV/UF3uzq7C+/GuXGNTKZxKewg5yD/DCFvKoCOpxu9u36FyqP/hw0S") catch {};
sb_priv_key.append("ADVlmp35/zoPDPZzu1j4FiCo0pJ9LwJcHxeJHopNAKDw9k6I4z/grskdgupsGzK2") catch {};
sb_priv_key.append("BiGiQ/+wmmO68/6Xa6KWfpr1PQ6ODJHgzZsdGCVi6Ebaqlj6BbsYWxP6h3lrsGt+") catch {};
sb_priv_key.append("LmHBaN2jCD6cDp+lihqFgnm8hfdv0lmbPilp71EDfwKBgQD6U8PBzZtN8yXm5WuS") catch {};
sb_priv_key.append("NL+/8q5GjNmeTJBSo1gM6Y8vOT4QAE147LbVuVBDwyHPoSrNejePae6Q14PswjBy") catch {};
sb_priv_key.append("T7B8DZ0OeQyGa3trrFg/ib7Vv4ZMvJqX9+WzBrzZsxTg7oCKHzmCR4vIRItKHH3z") catch {};
sb_priv_key.append("Wnnhqlo8ic2AZ2O43cdJosbO1wKBgQDe8UODOLu0vnHohOKeUqF3w/ZOB2+83/js") catch {};
sb_priv_key.append("YyUbSkzsGvHIwTjObuMUFTQvdMZ6IkIyJdfnDZIbvlBSD8tzL5iKFTNCK2nL1i4G") catch {};
sb_priv_key.append("iFr0CYLaHAlhJ5GEbTrTMDoJeBPerZq83HPrSa/Wb0xO18QTWsoVQPFfPFbbcQyI") catch {};
sb_priv_key.append("9ryJ2iIDrwKBgQC6kuAefG46ZPVk6K2KZUJdgDUgZC52a75NuW0RAqszmUiGiJM1") catch {};
sb_priv_key.append("g8ip9tq6BqAWrprGV0c93shusBKlzf5p1LdHXqYmeVY6gbWVhPipMrNHgN5KJ3BZ") catch {};
sb_priv_key.append("v+w1yNnMsErpcxne2HL2hPjMJTpj3GSLkm2xIlTrNhIyl9ydlr7IRUhENQKBgQCv") catch {};
sb_priv_key.append("i6HxbXa/90WSJTCcIcxqla8X+dsOCf3jhJ3vQy4Wq5C+1wZ35fCAG8Ifq/+so9Uj") catch {};
sb_priv_key.append("z5CVqqXlmpF8TFuSs2OVNuRJsg14J4nOMwgLKIIUZAcurQ10DN5I9Kx+UEK1EFXL") catch {};
sb_priv_key.append("aHsORdNjMfgQDO2jn9WHrr9gkg6CdB2+qyoCEfS+mQKBgBW08lcy9V5RzRWb/v/j") catch {};
sb_priv_key.append("xsc7ovmgAhCJhDeV7dPbx4HbFeoQJlbA8g1thdcFlcatSGyNDbvNE1GPSd4NhkpR") catch {};
sb_priv_key.append("Y6Hfv53kdEzjVkEtU8lUdL7HNVJqX7bU7oZlfbYcwxWQ1Gg8C1oLIAyEt71slQtd") catch {};
sb_priv_key.append("RiNYBRZTQe2F0wxbXnuUqLAw") catch {};
const priv_key = try chilkat.PrivateKey.init();
defer priv_key.deinit();
priv_key.loadPem(try sb_priv_key.getAsString(alloc)) catch {
std.debug.print("{s}\n", .{try priv_key.getLastErrorText(alloc)});
return;
};
const rsa = try chilkat.Rsa.init();
defer rsa.deinit();
rsa.usePrivateKey(priv_key) catch {
std.debug.print("{s}\n", .{try rsa.getLastErrorText(alloc)});
return;
};
rsa.setEncodingMode("base64");
const b64_signature = try rsa.signStringENC(alloc, try sb_string_to_sign.getAsString(alloc), "SHA256");
// ----------------------------------------------------------------
// Add the "signature" header.
//
// The signature header will look like this:
// signature: keyId="1523433508",algorithm="rsa-sha512",headers="date digest x-request-id",signature="y5o7gKxmfA6AT6...blE1A9Q=="
//
// The keyId is the serial number of the certificate as defined in 'TPP-Signing-Certificate' header, the format should be Integer not hex.
const cert = try chilkat.Cert.init();
defer cert.deinit();
cert.setFromEncoded(try sb_tpp_cert.getAsString(alloc)) catch {
std.debug.print("{s}\n", .{try cert.getLastErrorText(alloc)});
return;
};
const sb_sig_hdr_val = try chilkat.StringBuilder.init();
defer sb_sig_hdr_val.deinit();
sb_sig_hdr_val.append("keyId=\"") catch {};
sb_sig_hdr_val.append(try cert.getSerialDecimal(alloc)) catch {};
sb_sig_hdr_val.append("\",") catch {};
sb_sig_hdr_val.append("algorithm=\"rsa-sha256\",") catch {};
sb_sig_hdr_val.append("headers=\"date digest x-request-id\",") catch {};
sb_sig_hdr_val.append("signature=\"") catch {};
sb_sig_hdr_val.append(b64_signature) catch {};
sb_sig_hdr_val.append("\"") catch {};
http.setRequestHeader("signature", try sb_sig_hdr_val.getAsString(alloc));
// ----------------------------------------------------------------
// Add remaining headers...
http.setRequestHeader("x-ibm-client-id", "YOUR_APP_CLIENT_ID");
http.setRequestHeader("accept", "application/json");
// ----------------------------------------------------------------
// Add our certificate and key for mutual TLS
// (provide a registered X509 client certificate during TLS handhake)
const tls_cert = try chilkat.Cert.init();
defer tls_cert.deinit();
tls_cert.loadFromFile("qa_data/certs_and_keys/ING/example_client_tls.cer") catch {
std.debug.print("{s}\n", .{try tls_cert.getLastErrorText(alloc)});
return;
};
const bd_priv_key = try chilkat.BinData.init();
defer bd_priv_key.deinit();
bd_priv_key.loadFile("qa_data/certs_and_keys/ING/example_client_tls.key") catch {
std.debug.print("Failed to load example_client_tls.key\n", .{});
return;
};
// The OAuth 2.0 client_id for these certificates is e77d776b-90af-4684-bebc-521e5b2614dd.
// Please note down this client_id since you will need it in the next steps to call the API.
const tls_priv_key = try chilkat.PrivateKey.init();
defer tls_priv_key.deinit();
tls_priv_key.loadAnyFormat(bd_priv_key, "") catch {
std.debug.print("{s}\n", .{try tls_priv_key.getLastErrorText(alloc)});
return;
};
// Associate the private key with the certificate.
tls_cert.setPrivateKey(tls_priv_key) catch {
std.debug.print("{s}\n", .{try tls_cert.getLastErrorText(alloc)});
return;
};
http.setSslClientCert(tls_cert) catch {
std.debug.print("{s}\n", .{try http.getLastErrorText(alloc)});
return;
};
// ----------------------------------------------------------------
// Finally, send the request...
const sb_response_body = try chilkat.StringBuilder.init();
defer sb_response_body.deinit();
http.quickGetSb("https://api-sandbox.rabobank.nl/openapi/sandbox/payments/account-information/ais/v3/accounts", sb_response_body) catch {
std.debug.print("{s}\n", .{try http.getLastErrorText(alloc)});
std.debug.print("{s}\n", .{try sb_response_body.getAsString(alloc)});
return;
};
const j_resp = try chilkat.JsonObject.init();
defer j_resp.deinit();
j_resp.loadSb(sb_response_body) catch {};
j_resp.setEmitCompact(false);
std.debug.print("Response Body:\n", .{});
std.debug.print("{s}\n", .{try j_resp.emit(alloc)});
const resp_status_code = http.getLastStatus();
std.debug.print("Response Status Code = {d}\n", .{resp_status_code});
if (resp_status_code >= 400) {
std.debug.print("Response Header:\n", .{});
std.debug.print("{s}\n", .{try http.getLastHeader(alloc)});
std.debug.print("Failed.\n", .{});
return;
}
// Sample JSON response:
// (Sample code for parsing the JSON response is shown below)
// {
// "accounts": [
// {
// "_links": {
// "account": "/v3/accounts/dW9od2VIVUhGVypIZHVpaGRhdWR3OGRoY",
// "balances": "/v3/accounts/dW9od2VIVUhGVypIZHVpaGRhdWR3OGRoY/balances",
// "transactions": "/v3/accounts/dW9od2VIVUhGVypIZHVpaGRhdWR3OGRoY/transactions"
// },
// "currency": "EUR",
// "iban": "NL05RABO0812836782",
// "name": "Rosie Roy",
// "resourceId": "dW9od2VIVUhGVypIZHVpaGRhdWR3OGRoY",
// "status": "enabled"
// }
// ]
// }
// Sample code for parsing the JSON response...
// Use the following online tool to generate parsing code from sample JSON:
// Generate Parsing Code from JSON
var v_links_account: [:0]const u8 = "";
var v_links_balances: [:0]const u8 = "";
var v_links_transactions: [:0]const u8 = "";
var currency: [:0]const u8 = "";
var iban: [:0]const u8 = "";
var name: [:0]const u8 = "";
var resource_id: [:0]const u8 = "";
var status: [:0]const u8 = "";
var i: i32 = 0;
const count_i = j_resp.sizeOfArray("accounts");
while (i < count_i) {
j_resp.setI(i);
v_links_account = try j_resp.stringOf(alloc, "accounts[i]._links.account");
v_links_balances = try j_resp.stringOf(alloc, "accounts[i]._links.balances");
v_links_transactions = try j_resp.stringOf(alloc, "accounts[i]._links.transactions");
currency = try j_resp.stringOf(alloc, "accounts[i].currency");
iban = try j_resp.stringOf(alloc, "accounts[i].iban");
name = try j_resp.stringOf(alloc, "accounts[i].name");
resource_id = try j_resp.stringOf(alloc, "accounts[i].resourceId");
status = try j_resp.stringOf(alloc, "accounts[i].status");
i = i + 1;
}
}