Java

REST Basic Auth with Secure Strings

Demonstrates how to do REST Basic authentication using secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Chilkat2 Java

import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.Crypt2;
import com.chilkatsoft.chilkat2.JsonObject;
import com.chilkatsoft.chilkat2.Rest;
import com.chilkatsoft.chilkat2.SecureString;

public class ChilkatExample {

    public static void main(String[] args) {
        // This example requires the Chilkat API to have been previously unlocked.
        // See Global Unlock Sample for sample code.

        // Imagine we've previously saved our encrypted login and password within a JSON config file
        // that contains this:

        // {
        //   "http_login": "mCrOmA7mBA7Au9RuJGb9hw==",
        //   "http_password": "jJtiI9TgErTTpqBz9JtHBw=="
        // }

        JsonObject json = new JsonObject();
        json.loadFile("qa_data/passwords/http.json");

        Crypt2 crypt = new Crypt2();

        // These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
        crypt.setCryptAlgorithm("aes");
        crypt.setCipherMode("cbc");
        crypt.setKeyLength(128);
        crypt.setEncodedKey("000102030405060708090A0B0C0D0E0F", "hex");
        crypt.setEncodedIV("000102030405060708090A0B0C0D0E0F", "hex");
        crypt.setEncodingMode("base64");

        SecureString ssLogin = new SecureString();
        SecureString ssPassword = new SecureString();

        // Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
        // a randomly generated session key.)
        crypt.decryptSecureENC(json.stringOf("http_login"), ssLogin);
        crypt.decryptSecureENC(json.stringOf("http_password"), ssPassword);

        Rest rest = new Rest();

        // Connect to a REST server.
        boolean bTls = true;
        int port = 443;
        boolean bAutoReconnect = true;
        rest.connect("chilkatsoft.com", port, bTls, bAutoReconnect);

        // Cause the "Authorization: Basic ..." header to be added to HTTP requests
        rest.setAuthBasicSecure(ssLogin, ssPassword);

        String responseJson;
        try {
            responseJson = rest.fullRequestNoBody("GET", "/helloWorld.html");
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // Show the LastRequestHeader that was sent.
        System.out.println(rest.getLastRequestHeader());

        // The LastRequestHeader looks like this:

        // Host: chilkatsoft.com
        // Authorization: Basic bXlIdHRwTG9naW46bXlIdHRwUGFzc3dvcmQ=
    }
}