Ruby

REST Basic Auth with Secure Strings

Demonstrates how to do REST Basic authentication using secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Ruby

require 'chilkat'

success = false

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Imagine we've previously saved our encrypted login and password within a JSON config file
# that contains this:

# {
#   "http_login": "mCrOmA7mBA7Au9RuJGb9hw==",
#   "http_password": "jJtiI9TgErTTpqBz9JtHBw=="
# }

json = Chilkat::CkJsonObject.new()
json.LoadFile("qa_data/passwords/http.json")

crypt = Chilkat::CkCrypt2.new()

# These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
crypt.put_CryptAlgorithm("aes")
crypt.put_CipherMode("cbc")
crypt.put_KeyLength(128)
crypt.SetEncodedKey("000102030405060708090A0B0C0D0E0F","hex")
crypt.SetEncodedIV("000102030405060708090A0B0C0D0E0F","hex")
crypt.put_EncodingMode("base64")

ssLogin = Chilkat::CkSecureString.new()
ssPassword = Chilkat::CkSecureString.new()

# Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
# a randomly generated session key.)
crypt.DecryptSecureENC(json.stringOf("http_login"),ssLogin)
crypt.DecryptSecureENC(json.stringOf("http_password"),ssPassword)

rest = Chilkat::CkRest.new()

# Connect to a REST server.
bTls = true
port = 443
bAutoReconnect = true
success = rest.Connect("chilkatsoft.com",port,bTls,bAutoReconnect)

# Cause the "Authorization: Basic ..." header to be added to HTTP requests
rest.SetAuthBasicSecure(ssLogin,ssPassword)

responseJson = rest.fullRequestNoBody("GET","/helloWorld.html")
if (rest.get_LastMethodSuccess() != true)
    print rest.lastErrorText() + "\n";
    exit
end

# Show the LastRequestHeader that was sent.
print rest.lastRequestHeader() + "\n";

# The LastRequestHeader looks like this:

# Host: chilkatsoft.com
# Authorization: Basic bXlIdHRwTG9naW46bXlIdHRwUGFzc3dvcmQ=