Lazarus Pascal

REST Basic Auth with Secure Strings

Demonstrates how to do REST Basic authentication using secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Lazarus Pascal

program ChilkatDemo;

// Demonstrates using the Chilkat Pascal wrapper via the C bridge DLL.
// Builds as a console application under Lazarus (FPC) or Delphi.

{$IFDEF FPC}
  {$MODE DELPHI}
{$ENDIF}
{$APPTYPE CONSOLE}

uses
  {$IFDEF UNIX}
  cthreads,
  {$ENDIF}
  SysUtils,
  CkDllLoader,
  Chilkat.SecureString,
  Chilkat.Rest,
  Chilkat.JsonObject,
  Chilkat.Crypt2;

// ---------------------------------------------------------------------------

procedure RunDemo;
var
  success: Boolean;
  json: TJsonObject;
  crypt: TCrypt2;
  ssLogin: TSecureString;
  ssPassword: TSecureString;
  rest: TRest;
  bTls: Boolean;
  port: Integer;
  bAutoReconnect: Boolean;
  responseJson: string;

begin
  success := False;

  //  This example requires the Chilkat API to have been previously unlocked.
  //  See Global Unlock Sample for sample code.

  //  Imagine we've previously saved our encrypted login and password within a JSON config file
  //  that contains this:

  //  {
  //    "http_login": "mCrOmA7mBA7Au9RuJGb9hw==",
  //    "http_password": "jJtiI9TgErTTpqBz9JtHBw=="
  //  }

  json := TJsonObject.Create;
  json.LoadFile('qa_data/passwords/http.json');

  crypt := TCrypt2.Create;

  //  These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
  crypt.CryptAlgorithm := 'aes';
  crypt.CipherMode := 'cbc';
  crypt.KeyLength := 128;
  crypt.SetEncodedKey('000102030405060708090A0B0C0D0E0F','hex');
  crypt.SetEncodedIV('000102030405060708090A0B0C0D0E0F','hex');
  crypt.EncodingMode := 'base64';

  ssLogin := TSecureString.Create;
  ssPassword := TSecureString.Create;

  //  Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
  //  a randomly generated session key.)
  crypt.DecryptSecureENC(json.StringOf('http_login'),ssLogin);
  crypt.DecryptSecureENC(json.StringOf('http_password'),ssPassword);

  rest := TRest.Create;

  //  Connect to a REST server.
  bTls := True;
  port := 443;
  bAutoReconnect := True;
  success := rest.Connect('chilkatsoft.com',port,bTls,bAutoReconnect);

  //  Cause the "Authorization: Basic ..." header to be added to HTTP requests
  rest.SetAuthBasicSecure(ssLogin,ssPassword);

  responseJson := rest.FullRequestNoBody('GET','/helloWorld.html');
  if (rest.LastMethodSuccess <> True) then
    begin
      WriteLn(rest.LastErrorText);
      Exit;
    end;

  //  Show the LastRequestHeader that was sent.
  WriteLn(rest.LastRequestHeader);

  //  The LastRequestHeader looks like this:

  //  Host: chilkatsoft.com
  //  Authorization: Basic bXlIdHRwTG9naW46bXlIdHRwUGFzc3dvcmQ=


  json.Free;
  crypt.Free;
  ssLogin.Free;
  ssPassword.Free;
  rest.Free;

end;

// ---------------------------------------------------------------------------

begin

  try
    RunDemo;
  except
    on E: Exception do
      WriteLn('Unhandled exception: ', E.ClassName, ': ', E.Message);
  end;

  WriteLn;
  {$IFDEF MSWINDOWS}
  WriteLn('Press Enter to exit...');
  ReadLn;
  {$ENDIF}
end.