Xojo Plugin

REST Basic Auth with Secure Strings

Demonstrates how to do REST Basic authentication using secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Xojo Plugin

Dim success As Boolean
success = False

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Imagine we've previously saved our encrypted login and password within a JSON config file
// that contains this:

// {
//   "http_login": "mCrOmA7mBA7Au9RuJGb9hw==",
//   "http_password": "jJtiI9TgErTTpqBz9JtHBw=="
// }

Dim json As New Chilkat.JsonObject
success = json.LoadFile("qa_data/passwords/http.json")

Dim crypt As New Chilkat.Crypt2

// These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
crypt.CryptAlgorithm = "aes"
crypt.CipherMode = "cbc"
crypt.KeyLength = 128
crypt.SetEncodedKey "000102030405060708090A0B0C0D0E0F","hex"
crypt.SetEncodedIV "000102030405060708090A0B0C0D0E0F","hex"
crypt.EncodingMode = "base64"

Dim ssLogin As New Chilkat.SecureString
Dim ssPassword As New Chilkat.SecureString

// Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
// a randomly generated session key.)
success = crypt.DecryptSecureENC(json.StringOf("http_login"),ssLogin)
success = crypt.DecryptSecureENC(json.StringOf("http_password"),ssPassword)

Dim rest As New Chilkat.Rest

// Connect to a REST server.
Dim bTls As Boolean
bTls = True
Dim port As Int32
port = 443
Dim bAutoReconnect As Boolean
bAutoReconnect = True
success = rest.Connect("chilkatsoft.com",port,bTls,bAutoReconnect)

// Cause the "Authorization: Basic ..." header to be added to HTTP requests
success = rest.SetAuthBasicSecure(ssLogin,ssPassword)

Dim responseJson As String
responseJson = rest.FullRequestNoBody("GET","/helloWorld.html")
If (rest.LastMethodSuccess <> True) Then
    System.DebugLog(rest.LastErrorText)
    Return
End If

// Show the LastRequestHeader that was sent.
System.DebugLog(rest.LastRequestHeader)

// The LastRequestHeader looks like this:

// Host: chilkatsoft.com
// Authorization: Basic bXlIdHRwTG9naW46bXlIdHRwUGFzc3dvcmQ=