Objective-C

REST Basic Auth with Secure Strings

Demonstrates how to do REST Basic authentication using secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Objective-C

#import <CkoJsonObject.h>
#import <CkoCrypt2.h>
#import <CkoSecureString.h>
#import <CkoRest.h>
#import <NSString.h>

BOOL success = NO;

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

//  Imagine we've previously saved our encrypted login and password within a JSON config file
//  that contains this:

//  {
//    "http_login": "mCrOmA7mBA7Au9RuJGb9hw==",
//    "http_password": "jJtiI9TgErTTpqBz9JtHBw=="
//  }

CkoJsonObject *json = [[CkoJsonObject alloc] init];
[json LoadFile: @"qa_data/passwords/http.json"];

CkoCrypt2 *crypt = [[CkoCrypt2 alloc] init];

//  These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
crypt.CryptAlgorithm = @"aes";
crypt.CipherMode = @"cbc";
crypt.KeyLength = [NSNumber numberWithInt:128];
[crypt SetEncodedKey: @"000102030405060708090A0B0C0D0E0F" encoding: @"hex"];
[crypt SetEncodedIV: @"000102030405060708090A0B0C0D0E0F" encoding: @"hex"];
crypt.EncodingMode = @"base64";

CkoSecureString *ssLogin = [[CkoSecureString alloc] init];
CkoSecureString *ssPassword = [[CkoSecureString alloc] init];

//  Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
//  a randomly generated session key.)
[crypt DecryptSecureENC: [json StringOf: @"http_login"] secureStr: ssLogin];
[crypt DecryptSecureENC: [json StringOf: @"http_password"] secureStr: ssPassword];

CkoRest *rest = [[CkoRest alloc] init];

//  Connect to a REST server.
BOOL bTls = YES;
int port = 443;
BOOL bAutoReconnect = YES;
success = [rest Connect: @"chilkatsoft.com" port: [NSNumber numberWithInt: port] tls: bTls autoReconnect: bAutoReconnect];

//  Cause the "Authorization: Basic ..." header to be added to HTTP requests
[rest SetAuthBasicSecure: ssLogin password: ssPassword];

NSString *responseJson = [rest FullRequestNoBody: @"GET" uriPath: @"/helloWorld.html"];
if (rest.LastMethodSuccess != YES) {
    NSLog(@"%@",rest.LastErrorText);
    return;
}

//  Show the LastRequestHeader that was sent.
NSLog(@"%@",rest.LastRequestHeader);

//  The LastRequestHeader looks like this:

//  Host: chilkatsoft.com
//  Authorization: Basic bXlIdHRwTG9naW46bXlIdHRwUGFzc3dvcmQ=