Generate API WSS-Header for Kotlin

This topic contains 5 replies, has 4 voices, and was last updated by joedenly 5 years, 1 month ago.

Starting from March 1, 2020 the forum has been switched to the read-only mode. Please head to StackOverflow for support.

Creator
Topic

January 19, 2019 at 4:59 am #37924

SkaiBoa

Participant

Hi there,

I try to figure out how do I get a connection to the API for OroPlatform 3.1 for a Kotlin App.
Here is what I’ve done:

    public fun getHeader() {
        val prefs = PreferenceManager.getDefaultSharedPreferences(this.context)
        val user = prefs.getString("oro_user", "<unset>")
        val key = prefs.getString("oro_api_key", "<unset>")
        val md = MessageDigest.getInstance("SHA-1")

        //val nonce = base64_encode(substr(md5(uniqid()), 0, 16));
        val nonce = Base64.encode(md.digest(UUID.randomUUID().toString().toByteArray()), 0, 16,0)
        val sdf = SimpleDateFormat("yyyy-MM-dd hh:mm:ss+1:00", Locale.GERMAN)
        val created = sdf.format(Date())
        // digest 28 chars
        // nonce 24 chars
        val digest = Base64.encode((md.digest(nonce).toString()+created+key).toByteArray(), 0, 28, 1)
        var wsseHeader = "Authorization: WSSE profile=\"UsernameToken\"\n";
        wsseHeader += "X-WSSE: UsernameToken Username=\"$user\", PasswordDigest=\"$digest\", Nonce=\"$nonce\", Created=\"$created\""

        Log.i("data", wsseHeader)
    }

public fun getHeader() {

val prefs = PreferenceManager.getDefaultSharedPreferences(this.context)

val user = prefs.getString("oro_user", "<unset>")

val key = prefs.getString("oro_api_key", "<unset>")

val md = MessageDigest.getInstance("SHA-1")

//val nonce = base64_encode(substr(md5(uniqid()), 0, 16));

val nonce = Base64.encode(md.digest(UUID.randomUUID().toString().toByteArray()), 0, 16,0)

val sdf = SimpleDateFormat("yyyy-MM-dd hh:mm:ss+1:00", Locale.GERMAN)

val created = sdf.format(Date())

// digest 28 chars

// nonce 24 chars

val digest = Base64.encode((md.digest(nonce).toString()+created+key).toByteArray(), 0, 28, 1)

var wsseHeader = "Authorization: WSSE profile=\"UsernameToken\"\n";

wsseHeader += "X-WSSE: UsernameToken Username=\"$user\", PasswordDigest=\"$digest\", Nonce=\"$nonce\", Created=\"$created\""

Log.i("data", wsseHeader)

}

The problem is,that the strings for nonce and digest are just 10 chars long not as mentioned in the cookbook 28 and 24.

Does anyone faces the same problem and found a solution ?

This topic was modified 5 years, 3 months ago by SkaiBoa.
This topic was modified 5 years, 3 months ago by SkaiBoa.

Creator
Topic

Viewing 5 replies - 1 through 5 (of 5 total)

Author
Replies

January 21, 2019 at 5:12 am #37935

Yevhen Shyshkin

Participant

Hello SkaiBoa.

I’ve used following script to generate headers and it works fine (inspired by this post):

<?php

$userName = 'admin';
$userApiKey = '****************************************';

$nonce = base64_encode(substr(md5(uniqid()), 0, 16));

$created  = date('c');
$digest   = base64_encode(sha1(base64_decode($nonce) . $created . $userApiKey, true));

$wsseHeader = "Authorization: WSSE profile=\"UsernameToken\"\n";
$wsseHeader.= sprintf(
    'X-WSSE: UsernameToken Username="%s", PasswordDigest="%s", Nonce="%s", Created="%s"',
    $userName,
    $digest,
    $nonce,
    $created
);

echo $wsseHeader;

<?php

$userName = 'admin';

$userApiKey = '****************************************';

$nonce = base64_encode(substr(md5(uniqid()), 0, 16));

$created = date('c');

$digest = base64_encode(sha1(base64_decode($nonce) . $created . $userApiKey, true));

$wsseHeader = "Authorization: WSSE profile=\"UsernameToken\"\n";

$wsseHeader.= sprintf(

'X-WSSE: UsernameToken Username="%s", PasswordDigest="%s", Nonce="%s", Created="%s"',

$userName,

$digest,

$nonce,

$created

);

echo $wsseHeader;

And as a result I got following headers:

Authorization: WSSE profile="UsernameToken"
X-WSSE: UsernameToken Username="admin", PasswordDigest="wJil12uyiawHnXT9wH9i2PGwmEI=", Nonce="NWI0YTgxZTA2NzMwZDlmZQ==", Created="2019-01-21T13:51:34+01:00"

1 2	Authorization: WSSE profile="UsernameToken" X-WSSE: UsernameToken Username="admin", PasswordDigest="wJil12uyiawHnXT9wH9i2PGwmEI=", Nonce="NWI0YTgxZTA2NzMwZDlmZQ==", Created="2019-01-21T13:51:34+01:00"

I can guess that either something is with the way you are extracting a substring or SHA-1 hash is generated in binary form instead of hexadecimal.

January 21, 2019 at 5:12 am #37936

Yevhen Shyshkin

Participant

Here I have traced nonce generation step by step – you can do the same and hopefully it may give you a clue of what was done wrong.

php > $unique = uniqid();
php > var_dump($unique);
string(13) "5c45c4039fc2e"

php > $md5 = md5($unique);
php > var_dump($md5);
string(32) "0fe6b69c035cbf636524a562c055f0f3"

php > $substr = substr($md5, 0, 16);
php > var_dump($substr);
string(16) "0fe6b69c035cbf63"

php > $nonce = base64_encode($substr);
php > var_dump($nonce);
string(24) "MGZlNmI2OWMwMzVjYmY2Mw=="

php > $unique = uniqid();

php > var_dump($unique);

string(13) "5c45c4039fc2e"

php > $md5 = md5($unique);

php > var_dump($md5);

string(32) "0fe6b69c035cbf636524a562c055f0f3"

php > $substr = substr($md5, 0, 16);

php > var_dump($substr);

string(16) "0fe6b69c035cbf63"

php > $nonce = base64_encode($substr);

php > var_dump($nonce);

string(24) "MGZlNmI2OWMwMzVjYmY2Mw=="

Please let me know if it helped you with your issue.

February 7, 2019 at 9:48 am #38104

SkaiBoa

Participant

Thank you very much for your reply. Finally I found a solution for getting access to the ORO-API from an Android App:

import android.content.Context
import android.preference.PreferenceManager
import android.util.Base64
import java.util.*
import java.nio.charset.Charset
import java.security.MessageDigest
import java.text.SimpleDateFormat

class OroAPIManager constructor(val context: Context) {
    fun getHeader(): String {
        val prefs = PreferenceManager.getDefaultSharedPreferences(this.context)
        val user = prefs.getString("oro_user", "<unset>")
        val key = prefs.getString("oro_api_key", "<unset>")

        val uid = UUID.randomUUID().toString();
        val nonce = String(Base64.encode(convertToDigestString(uid, "MD5").toByteArray(), 0, 16,0)).dropLast(1)
        var created = SimpleDateFormat("yyyy-MM-dd'T'HH:mm:ssZ", Locale.GERMANY).format(Date())
        created = created.replaceRange(created.length - 2, created.length - 1, ":0")

        val nonceBase64 = String(Base64.decode(nonce.toByteArray(), Base64.DEFAULT))
        val sha1 = hexToBin(convertToDigestString(nonceBase64  + created + key, "SHA-1"))
        val digest = Base64.encode(sha1.toByteArray(Charset.forName("ISO-8859-1")), Base64.DEFAULT)

        var wsseHeader = "Authorization: WSSE profile=\"UsernameToken\"\n";
        wsseHeader += "X-WSSE: UsernameToken Username=\"$user\", "
        wsseHeader += "PasswordDigest=\"${String(digest).dropLast(1)}\", "
        wsseHeader += "Nonce=\"$nonce\", "
        wsseHeader += "Created=\"$created\""

        return wsseHeader;
    }

    private fun convertToDigestString(raw: String, digestName: String): String {
        val bytes = raw.toByteArray()
        val md = MessageDigest.getInstance(digestName)
        val digest = md.digest(bytes)

        val hexChars = "0123456789abcdef"
        val convertedString = StringBuilder(digest.size * 2)

        digest.forEach {
            val i = it.toInt()
            convertedString.append(hexChars[i shr 4 and 0x0f])
            convertedString.append(hexChars[i and 0x0f])
        }

        return convertedString.toString()
    }

    private fun hexToBin(hexStr: String): String {
        val output = StringBuilder("")
        var i = 0
        while (i < hexStr.length) {
            val str = hexStr.substring(i, i + 2)
            output.append(Integer.parseInt(str, 16).toChar())
            i += 2
        }

        return output.toString()
    }
}

import android.content.Context

import android.preference.PreferenceManager

import android.util.Base64

import java.util.*

import java.nio.charset.Charset

import java.security.MessageDigest

import java.text.SimpleDateFormat

class OroAPIManager constructor(val context: Context) {

fun getHeader(): String {

val prefs = PreferenceManager.getDefaultSharedPreferences(this.context)

val user = prefs.getString("oro_user", "<unset>")

val key = prefs.getString("oro_api_key", "<unset>")

val uid = UUID.randomUUID().toString();

val nonce = String(Base64.encode(convertToDigestString(uid, "MD5").toByteArray(), 0, 16,0)).dropLast(1)

var created = SimpleDateFormat("yyyy-MM-dd'T'HH:mm:ssZ", Locale.GERMANY).format(Date())

created = created.replaceRange(created.length - 2, created.length - 1, ":0")

val nonceBase64 = String(Base64.decode(nonce.toByteArray(), Base64.DEFAULT))

val sha1 = hexToBin(convertToDigestString(nonceBase64 + created + key, "SHA-1"))

val digest = Base64.encode(sha1.toByteArray(Charset.forName("ISO-8859-1")), Base64.DEFAULT)

var wsseHeader = "Authorization: WSSE profile=\"UsernameToken\"\n";

wsseHeader += "X-WSSE: UsernameToken Username=\"$user\", "

wsseHeader += "PasswordDigest=\"${String(digest).dropLast(1)}\", "

wsseHeader += "Nonce=\"$nonce\", "

wsseHeader += "Created=\"$created\""

return wsseHeader;

}

private fun convertToDigestString(raw: String, digestName: String): String {

val bytes = raw.toByteArray()

val md = MessageDigest.getInstance(digestName)

val digest = md.digest(bytes)

val hexChars = "0123456789abcdef"

val convertedString = StringBuilder(digest.size * 2)

digest.forEach {

val i = it.toInt()

convertedString.append(hexChars[i shr 4 and 0x0f])

convertedString.append(hexChars[i and 0x0f])

}

return convertedString.toString()

}

private fun hexToBin(hexStr: String): String {

val output = StringBuilder("")

var i = 0

while (i < hexStr.length) {

val str = hexStr.substring(i, i + 2)

output.append(Integer.parseInt(str, 16).toChar())

i += 2

}

return output.toString()

}

February 7, 2019 at 5:20 pm #38107

Michael

Keymaster

You are most welcome.

February 26, 2019 at 11:52 pm #38242

joedenly

Participant

This is interesting to get the solution of this kotlin API, Fix Error code 0X0070002 helped me to solve the issue of API for OroPlatform 3.1 for a Kotlin App.

Author
Replies

Viewing 5 replies - 1 through 5 (of 5 total)

The forum ‘OroPlatform – How do I? Questions’ is closed to new topics and replies.

OroPlatform Forums