Dart

REST Basic Auth with Secure Strings

Demonstrates how to do REST Basic authentication using secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Dart

import 'package:chilkat/chilkat.dart';

void main() {
  // This example requires the Chilkat API to have been previously unlocked.
  // See Global Unlock Sample for sample code.

  // Imagine we've previously saved our encrypted login and password within a JSON config file
  // that contains this:

  // {
  //   "http_login": "mCrOmA7mBA7Au9RuJGb9hw==",
  //   "http_password": "jJtiI9TgErTTpqBz9JtHBw=="
  // }

  final json = CkJsonObject();
  json.loadFile('qa_data/passwords/http.json');

  final crypt = CkCrypt2();

  // These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
  crypt.cryptAlgorithm = 'aes';
  crypt.cipherMode = 'cbc';
  crypt.keyLength = 128;
  crypt.setEncodedKey('000102030405060708090A0B0C0D0E0F', 'hex');
  crypt.setEncodedIV('000102030405060708090A0B0C0D0E0F', 'hex');
  crypt.encodingMode = 'base64';

  final ssLogin = CkSecureString();
  final ssPassword = CkSecureString();

  // Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
  // a randomly generated session key.)
  crypt.decryptSecureENC(json.stringOf('http_login'), ssLogin);
  crypt.decryptSecureENC(json.stringOf('http_password'), ssPassword);

  final rest = CkRest();

  // Connect to a REST server.
  final bTls = true;
  final port = 443;
  final bAutoReconnect = true;
  rest.connect('chilkatsoft.com', port, bTls, bAutoReconnect);

  // Cause the "Authorization: Basic ..." header to be added to HTTP requests
  rest.setAuthBasicSecure(ssLogin, ssPassword);

  final String responseJson;
  try {
    responseJson = rest.fullRequestNoBody('GET', '/helloWorld.html');
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    return;
  }

  // Show the LastRequestHeader that was sent.
  print(rest.lastRequestHeader);

  // The LastRequestHeader looks like this:

  // Host: chilkatsoft.com
  // Authorization: Basic bXlIdHRwTG9naW46bXlIdHRwUGFzc3dvcmQ=
}