React Native

REST Basic Auth with Secure Strings

Demonstrates how to do REST Basic authentication using secure strings.

This example requires Chilkat v9.5.0.71 or greater.

React Native

import { Crypt2, JsonObject, Rest, SecureString } from '@chilkat/react-native'

async function chilkatExample() {
  // This example requires the Chilkat API to have been previously unlocked.
  // See Global Unlock Sample for sample code.

  // Imagine we've previously saved our encrypted login and password within a JSON config file
  // that contains this:

  // {
  //   "http_login": "mCrOmA7mBA7Au9RuJGb9hw==",
  //   "http_password": "jJtiI9TgErTTpqBz9JtHBw=="
  // }

  const json = new JsonObject();
  json.loadFile('qa_data/passwords/http.json');

  const crypt = new Crypt2();

  // These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
  crypt.cryptAlgorithm = 'aes';
  crypt.cipherMode = 'cbc';
  crypt.keyLength = 128;
  crypt.setEncodedKey('000102030405060708090A0B0C0D0E0F', 'hex');
  crypt.setEncodedIV('000102030405060708090A0B0C0D0E0F', 'hex');
  crypt.encodingMode = 'base64';

  const ssLogin = new SecureString();
  const ssPassword = new SecureString();

  // Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
  // a randomly generated session key.)
  crypt.decryptSecureENC(json.stringOf('http_login'), ssLogin);
  crypt.decryptSecureENC(json.stringOf('http_password'), ssPassword);

  const rest = new Rest();

  // Connect to a REST server.
  const bTls = true;
  const port = 443;
  const bAutoReconnect = true;
  await rest.connectAsync('chilkatsoft.com', port, bTls, bAutoReconnect);

  // Cause the "Authorization: Basic ..." header to be added to HTTP requests
  rest.setAuthBasicSecure(ssLogin, ssPassword);

  let responseJson: string;
  try {
    responseJson = await rest.fullRequestNoBodyAsync('GET', '/helloWorld.html');
  } catch {
    console.log(rest.lastErrorText);
    return;
  }

  // Show the LastRequestHeader that was sent.
  console.log(rest.lastRequestHeader);

  // The LastRequestHeader looks like this:

  // Host: chilkatsoft.com
  // Authorization: Basic bXlIdHRwTG9naW46bXlIdHRwUGFzc3dvcmQ=
}