PHP Extension

REST Basic Auth with Secure Strings

Demonstrates how to do REST Basic authentication using secure strings.

This example requires Chilkat v9.5.0.71 or greater.

PHP Extension

<?php

include("chilkat.php");

$success = false;

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Imagine we've previously saved our encrypted login and password within a JSON config file
// that contains this:

// {
//   "http_login": "mCrOmA7mBA7Au9RuJGb9hw==",
//   "http_password": "jJtiI9TgErTTpqBz9JtHBw=="
// }

$json = new CkJsonObject();
$json->LoadFile('qa_data/passwords/http.json');

$crypt = new CkCrypt2();

// These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
$crypt->put_CryptAlgorithm('aes');
$crypt->put_CipherMode('cbc');
$crypt->put_KeyLength(128);
$crypt->SetEncodedKey('000102030405060708090A0B0C0D0E0F','hex');
$crypt->SetEncodedIV('000102030405060708090A0B0C0D0E0F','hex');
$crypt->put_EncodingMode('base64');

$ssLogin = new CkSecureString();
$ssPassword = new CkSecureString();

// Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
// a randomly generated session key.)
$crypt->DecryptSecureENC($json->stringOf('http_login'),$ssLogin);
$crypt->DecryptSecureENC($json->stringOf('http_password'),$ssPassword);

$rest = new CkRest();

// Connect to a REST server.
$bTls = true;
$port = 443;
$bAutoReconnect = true;
$success = $rest->Connect('chilkatsoft.com',$port,$bTls,$bAutoReconnect);

// Cause the "Authorization: Basic ..." header to be added to HTTP requests
$rest->SetAuthBasicSecure($ssLogin,$ssPassword);

$responseJson = $rest->fullRequestNoBody('GET','/helloWorld.html');
if ($rest->get_LastMethodSuccess() != true) {
    print $rest->lastErrorText() . "\n";
    exit;
}

// Show the LastRequestHeader that was sent.
print $rest->lastRequestHeader() . "\n";

// The LastRequestHeader looks like this:

// Host: chilkatsoft.com
// Authorization: Basic bXlIdHRwTG9naW46bXlIdHRwUGFzc3dvcmQ=

?>