Sample code for 30+ languages & platforms
React Native

ZATCA Onboarding Get Compliance CSID

See more ZATCA Examples

Demonstrates sending a POST to get a compliance CSID, which is two parts: A binary security token, and a secret.

Chilkat React Native Downloads

React Native
import { Http, HttpResponse, JsonObject, Pem, StringBuilder } from '@chilkat/react-native'

async function chilkatExample() {
  // This example requires the Chilkat API to have been previously unlocked.
  // See Global Unlock Sample for sample code.

  // It is assumed you've already generated a CSR.
  // Also, you'll need an OTP code, valid for 1 hour, which is generated online in the Fatoora portal.  See 
  // https://zatca.gov.sa/ar/E-Invoicing/Introduction/Guidelines/Documents/E-invoicing%20Detailed%20Technical%20Guidelines.pdf

  // Manually replace this with the OTP code you interactively obtained in a browser session from the Fatoora portal.
  // The OTP code is valid for 1 hour.
  const otp = '123434';

  // You should already have a CSR in a file containing something that looks like this:

  // -----BEGIN CERTIFICATE REQUEST-----
  // MIIB5DCCAYsCAQAwTDELMAkGA1UEBhMCU0ExFTATBgNVBAsMDFJpeWFkIEJyYW5j
  // aDEQMA4GA1UECgwHQ29udG9zbzEUMBIGA1UEAwwLRUExMjM0NTY3ODkwVjAQBgcq
  // hkjOPQIBBgUrgQQACgNCAAQI6op+6GQ4Gmn9oy0DpGxX0lFtUIvj+4Jtnp0VyEsH
  // +ZO7lpgksbRC484R3fAsO0v+Ly24ZIUIOYEIAeJ1f6AooIHfMIHcBgkqhkiG9w0B
  // CQ4xgc4wgcswIQYJKwYBBAGCNxQCBBQTElpBVENBLUNvZGUtU2lnbmluZzCBpQYD
  // VR0RBIGdMIGapIGXMIGUMTswOQYDVQQEDDIxLVRTVHwyLVRTVHwzLWVkMjJmMWQ4
  // LWU2YTItMTExOC05YjU4LWQ5YThmMTFlNDQ1ZjEfMB0GCgmSJomT8ixkAQEMDzMx
  // MDEyMjM5MzUwMDAwMzENMAsGA1UEDAwEMTEwMDESMBAGA1UEGgwJTXlBZGRyZXNz
  // MREwDwYDVQQPDAhJbmR1c3RyeTAKBggqhkjOPQQDAgNHADBEAiBurm6KdAeHfXzt
  // h/jk8xSMBP4TAkkFrg+hWDhfI0/SuAIgJi8ectM7YwBIBCmf0tdFcVTU7GBbvjnK
  // xValZCAO39M=
  // -----END CERTIFICATE REQUEST-----

  const pem = new Pem();
  try {
    pem.loadPemFile('c:/aaworkarea/zatca/onboarding/taxpayer.csr', '');
  } catch {
    console.log(pem.lastErrorText);
    return;
  }

  // Get the base64 from the CSR in a single line.
  const sbCsrBase64 = new StringBuilder();
  sbCsrBase64.append(pem.getEncodedItem('csr', '', 'base64', 0));
  let numReplaced = sbCsrBase64.replace('\r', '');
  numReplaced = sbCsrBase64.replace('\n', '');
  const csrBase64 = sbCsrBase64.getAsString();
  console.log(csrBase64);

  const json = new JsonObject();
  json.emitCompact = false;
  json.updateSb('csr', sbCsrBase64);

  const http = new Http();
  http.accept = 'application/json';
  http.setRequestHeader('OTP', otp);
  http.setRequestHeader('Accept-Version', 'V2');
  const resp = new HttpResponse();
  try {
    await http.httpJsonAsync('POST', 'https://gw-apic-gov.gazt.gov.sa/e-invoicing/core/compliance', json, 'application/json', resp);
  } catch {
    console.log(http.lastErrorText);
    return;
  }

  if (resp.statusCode !== 200) {
    console.log(resp.bodyStr);
    console.log(`response status code = ${resp.statusCode}`);
    console.log('Failed');
    return;
  }

  const jsonResp = new JsonObject();
  resp.getBodyJson(jsonResp);

  jsonResp.emitCompact = false;
  console.log('JSON response:');
  console.log(jsonResp.emit());
}