Rust

HMRC Validate Fraud Prevention Headers

See more HTTP Misc Examples

Demonstrates how to test (validate) HMRC fraud prevention headers. Rust

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

let rest = chilkat::Rest::new();

if rest.connect("test-api.service.hmrc.gov.uk", 443, true, true).is_err() {
    println!("{}", rest.last_error_text());
    return;
}

// Load the previously fetched access token.
let json = chilkat::JsonObject::new();
let _ = json.load_file("qa_data/tokens/hmrc.json").is_ok();
let access_token = json.string_of("access_token").unwrap_or_default();
println!("Using access toke: {}", access_token);

let sb_auth_header_value = chilkat::StringBuilder::new();
let _ = sb_auth_header_value.append("Bearer ");
let _ = sb_auth_header_value.append(&access_token);

let _ = rest.add_header("Accept", "application/vnd.hmrc.1.0+json");
let _ = rest.add_header("Authorization", &sb_auth_header_value.get_as_string().unwrap_or_default());

// Add the fraud prevention headers.
// See https://developer.service.hmrc.gov.uk/api-documentation/docs/fraud-prevention
let _ = rest.add_header("gov-client-connection-method", "DESKTOP_APP_DIRECT");

// This should be generated by an application and persistently stored on the device. The identifier should not expire.
let _ = rest.add_header("gov-client-device-id", "beec798b-b366-47fa-b1f8-92cede14a1ce");

// See https://developer.service.hmrc.gov.uk/api-documentation/docs/fraud-prevention
let _ = rest.add_header("gov-client-user-ids", "os=user123");

// Your local IP addresses (comma separated), such as addresses beginning with "192.168." or "172.16."
let _ = rest.add_header("gov-client-local-ips", "172.16.16.23");
// You'll need to find a way to get your MAC address.  Chilkat does not yet provide this ability...
let _ = rest.add_header("gov-client-mac-addresses", "7C%3AD3%3A0A%3A25%3ADA%3A1C");

let _ = rest.add_header("gov-client-timezone", "UTC+00:00");

// You can probably just hard-code these so they're always the same with each request.
let _ = rest.add_header("gov-client-window-size", "width=1256&height=800");
let _ = rest.add_header("gov-client-screens", "width=1920&height=1080&scaling-factor=1&colour-depth=16");
let _ = rest.add_header("gov-client-user-agent", "Windows/Server%202012 (Dell%20Inc./OptiPlex%20980)");
let _ = rest.add_header("gov-vendor-version", "My%20Desktop%20Software=1.2.3.build4286");

let Ok(response_str) = rest.full_request_no_body("GET", "/test/fraud-prevention-headers/validate") else {
    println!("{}", rest.last_error_text());
    return;
};

// If the status code is 200, then the fraud prevention headers were validated.
// The JSON response may include some warnings..
println!("Response status code = {}", rest.response_status_code());
println!("Response JSON body: ");
println!("{}", response_str);