But first…
Registration for NAV TechDays 2017 have been opened. I will do a workshop on web services and json. I will be using both C/AL and AL with VS Code in this workshop.
Make sure to register for the conference and if possible go to one or two of the workshops.
Now to the topic. Yesterday I started to develop an integration solution for bokun.io. Their API is RESTful and uses Json file formats. It also requires authentication.
In a project like this I usually start by using the OCR Service Setup from standard NAV. Create a Setup table and a page.
Looking at the API documentation we can see that we need to use HmacSHA1 with both Access Key and Secret Key to authenticate. In other project I used HmacSHA256 with the Access Key for the Azure API.
First part of the authentication is the time stamp created in UTC. I find it easy to use the DateTime DotNet variable to solve this. There are two different formatting I needed to use.
REST service normally just use GET or POST http methods. The authentication is usually in the request headers. This is an example from bokun.is
The GetSignature function is
The Secret Key string and the Signature is converted to a byte array. The Crypto class is constructed with the Secret Key Byte Array and used to compute hash for the Signature Byte Array. That hash is also a byte array that must be converted to a base64 string. This will give you the HmacSHA1 signature to use in the request header.
My Azure project is using HmacSHA256 but the code is similar.
Azure displays the Access Keys in base64 format while bokun.is has a normal string.
A little further down the line I choose not to use XML Ports, like I did here, but still convert Json to Xml or Xml to Json.
I use the functions from Codeunit “XML DOM Management” to handle the Xml. This code should give you the general idea.
OBJECT Codeunit 60201 Bokun.is Data Management { OBJECT-PROPERTIES { Date=; Time=; Version List=; } PROPERTIES { OnRun=BEGIN END; } CODE { VAR XMLDOMMgt@60200 : Codeunit 6224; PROCEDURE ReadCurrencies@1(ResponseString@10035985 : Text;VAR CurrencyBuffer@10035988 : TEMPORARY Record 60201); VAR XmlDocument@60202 : DotNet "'System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Xml.XmlDocument"; ResultXMLNodeList@60201 : DotNet "'System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Xml.XmlNodeList"; ResultXMLNode@60200 : DotNet "'System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Xml.XmlNode"; BEGIN XmlDocument := XmlDocument.XmlDocument; XmlDocument.LoadXml(JsonToXml('{"Currency":' + ResponseString + '}')); XMLDOMMgt.FindNodes(XmlDocument.DocumentElement,'Currency',ResultXMLNodeList); FOREACH ResultXMLNode IN ResultXMLNodeList DO ReadCurrency(ResultXMLNode,CurrencyBuffer); END; LOCAL PROCEDURE ReadCurrency@60205(ResultXMLNode@60201 : DotNet "'System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Xml.XmlNode";VAR CurrencyBuffer@60200 : TEMPORARY Record 60201); BEGIN WITH CurrencyBuffer DO BEGIN INIT; Code := XMLDOMMgt.FindNodeText(ResultXMLNode,'code'); "Currency Factor" := ToDecimal(XMLDOMMgt.FindNodeText(ResultXMLNode,'rate')); Payment := ToBoolean(XMLDOMMgt.FindNodeText(ResultXMLNode,'payment')); INSERT; END; END; PROCEDURE ReadActivities@60201(ResponseString@10035985 : Text); VAR XmlDocument@60202 : DotNet "'System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Xml.XmlDocument"; ResultXMLNodeList@60201 : DotNet "'System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Xml.XmlNodeList"; ResultXMLNode@60200 : DotNet "'System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Xml.XmlNode"; BEGIN XmlDocument := XmlDocument.XmlDocument; XmlDocument.LoadXml(JsonToXml(ResponseString)); END; PROCEDURE GetActivityRequestJson@10035986(NoOfParticipants@60200 : Integer;StartDate@60201 : Date;EndDate@60202 : Date) Json : Text; VAR XmlDocument@10035987 : DotNet "'System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Xml.XmlDocument"; CreatedXMLNode@10035988 : DotNet "'System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Xml.XmlNode"; BEGIN XmlDocument := XmlDocument.XmlDocument; XMLDOMMgt.AddRootElement(XmlDocument,GetDocumentElementName,CreatedXMLNode); IF NoOfParticipants <> 0 THEN XMLDOMMgt.AddNode(CreatedXMLNode,'participants',FORMAT(NoOfParticipants,0,9)); IF StartDate <> 0D THEN XMLDOMMgt.AddNode(CreatedXMLNode,'startDate',FORMAT(StartDate,0,9)); IF EndDate <> 0D THEN XMLDOMMgt.AddNode(CreatedXMLNode,'endDate',FORMAT(EndDate,0,9)); Json := XmlToJson(XmlDocument.OuterXml); END; PROCEDURE XmlToJson@94(Xml@10035985 : Text) Json : Text; VAR JsonConvert@10017292 : DotNet "'Newtonsoft.Json, Version=6.0.0.0, Culture=neutral, PublicKeyToken=30ad4fe6b2a6aeed'.Newtonsoft.Json.JsonConvert"; JsonFormatting@10017296 : DotNet "'Newtonsoft.Json, Version=6.0.0.0, Culture=neutral, PublicKeyToken=30ad4fe6b2a6aeed'.Newtonsoft.Json.Formatting"; XmlDocument@10017291 : DotNet "'System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Xml.XmlDocument"; BEGIN XmlDocument := XmlDocument.XmlDocument; XmlDocument.LoadXml(Xml); Json := JsonConvert.SerializeXmlNode(XmlDocument.DocumentElement,JsonFormatting.Indented,TRUE); END; PROCEDURE JsonToXml@95(Json@10035985 : Text) Xml : Text; VAR JsonConvert@10017293 : DotNet "'Newtonsoft.Json, Version=6.0.0.0, Culture=neutral, PublicKeyToken=30ad4fe6b2a6aeed'.Newtonsoft.Json.JsonConvert"; XmlDocument@10017291 : DotNet "'System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Xml.XmlDocument"; BEGIN XmlDocument := JsonConvert.DeserializeXmlNode(Json,GetDocumentElementName); Xml := XmlDocument.OuterXml; END; LOCAL PROCEDURE GetDocumentElementName@97() : Text; BEGIN EXIT('Bokun.is'); END; LOCAL PROCEDURE ToDecimal@98(InnerText@10035985 : Text) Result : Decimal; BEGIN IF NOT EVALUATE(Result,InnerText,9) THEN EXIT(0); END; LOCAL PROCEDURE ToInteger@92(InnerText@10035985 : Text) Result : Decimal; BEGIN IF NOT EVALUATE(Result,InnerText,9) THEN EXIT(0); END; LOCAL PROCEDURE ToBoolean@91(InnerText@10035985 : Text) Result : Boolean; BEGIN IF NOT EVALUATE(Result,InnerText,9) THEN EXIT(FALSE); END; LOCAL PROCEDURE ToDate@93(InnerText@10035985 : Text) Result : Date; BEGIN IF NOT EVALUATE(Result,COPYSTR(InnerText,1,10),9) THEN EXIT(0D); END; LOCAL PROCEDURE ToDateTime@99(InnerText@10035985 : Text) Result : DateTime; BEGIN IF NOT EVALUATE(Result,InnerText,9) THEN EXIT(0DT); END; BEGIN END. } }
Hi,
Thanks for the post.
I have a problem with the function for calculating the hmacsha256 : i have a = in the sign and the authentication failed because of it.
Could you give me more detail (variables , functions…) about the function where you calculate the hamcsha256 ?
do you know what .net can i use to avoid the = in the string ?
I am using https://msdn.microsoft.com/en-us/library/system.security.cryptography(v=vs.110).aspx
Hello Gunnar,
Great post!
I found it as I am trying to define a variable referencing DotNet HMACSHA256 and I was wondering what how your variable crypto is defined.
System.Security.Cryptography.HMACSHA256 Does not show as a possibility in my NAV (2016) ?
regards,
Chris
Hi Cris
The System keyword can be found in multiple dll files. Including mscorlib, System, System.Web, System.Security…
When you lookup the Class on MSDN (https://msdn.microsoft.com/en-us/library/system.security.cryptography.hmacsha256(v=vs.110).aspx) you can see that this one here:
Namespace: System.Security.Cryptography
Assembly: mscorlib (in mscorlib.dll)
I have problem with Newtonsoft.Json, i dont have it in assemby list. What to do?
Hi Gunnar,
Thanks for sharing the very helpful post.
could you please share how you defined variable “DatatoHMAC”?
Which Namespace and Assembly you used here.
I am facing error “The function call was ambiguous. No matching method was found.” in below code.
Signature := Convert.ToBase64String(Crypto.ComputeHash(DataToHMAC));
Thanks in advance.
Hello Kumar
This part is about creating a Azure signature for the message. Do you need that?
Hi Gunnar,
Thanks for your prompt response.
Yes, actually i am trying to create a HMACSHA256 signature for amazon SQS.
Thanks.
Right. I usually find a CSharp example to try out first. Then apply that to NAV/BC.