(PHP ActiveX) REST Basic Auth with Secure Strings

Demonstrates how to do REST Basic authentication using secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Imagine we've previously saved our encrypted login and password within a JSON config file
// that contains this:

// {
//   "http_login": "mCrOmA7mBA7Au9RuJGb9hw==",
//   "http_password": "jJtiI9TgErTTpqBz9JtHBw=="
// }

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.JsonObject')
$json = new COM("Chilkat.JsonObject");
$json->LoadFile('qa_data/passwords/http.json');

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Crypt2')
$crypt = new COM("Chilkat.Crypt2");

// These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
$crypt->CryptAlgorithm = 'aes';
$crypt->CipherMode = 'cbc';
$crypt->KeyLength = 128;
$crypt->SetEncodedKey('000102030405060708090A0B0C0D0E0F','hex');
$crypt->SetEncodedIV('000102030405060708090A0B0C0D0E0F','hex');
$crypt->EncodingMode = 'base64';

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.SecureString')
$ssLogin = new COM("Chilkat.SecureString");
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.SecureString')
$ssPassword = new COM("Chilkat.SecureString");

// Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
// a randomly generated session key.)
$crypt->DecryptSecureENC($json->stringOf('http_login'),$ssLogin);
$crypt->DecryptSecureENC($json->stringOf('http_password'),$ssPassword);

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Rest')
$rest = new COM("Chilkat.Rest");

// Connect to a REST server.
$bTls = 1;
$port = 443;
$bAutoReconnect = 1;
$success = $rest->Connect('chilkatsoft.com',$port,$bTls,$bAutoReconnect);

// Cause the "Authorization: Basic ..." header to be added to HTTP requests
$rest->SetAuthBasicSecure($ssLogin,$ssPassword);

$responseJson = $rest->fullRequestNoBody('GET','/helloWorld.html');
if ($rest->LastMethodSuccess != 1) {
    print $rest->LastErrorText . "\n";
    exit;
}

// Show the LastRequestHeader that was sent.
print $rest->LastRequestHeader . "\n";

// The LastRequestHeader looks like this:

// Host: chilkatsoft.com
// Authorization: Basic bXlIdHRwTG9naW46bXlIdHRwUGFzc3dvcmQ=

?>