|
Perhaps there's someone out there that has done FirstData G4 SOAP V14 in VB, and can checkout or point out any mistakes I made.
So I get this error upon transmitting
The HTTP request is unauthorized with client authentication scheme 'Anonymous'. The authentication header received from the server was ''.
So I'm figuring my HMAC header authentication is way off, and i get a generic response back.
I have a XML version that works just fine. And the G4 Sandbox has a HMAC Calculator tool, that I can use to compare and generate the values.
Issue 1:
But I'm not sure if what I'm pasting in as content is correct, in order to validate the code block, 2 blocks below.
example: Not sure if this is the correct format of SOAP Content, so I can run the FirstData HMAC Generate to confirm my values are right.
I using the same code sort of, to generate the HMAC stuff.
I just can't get a match of values, I'm way off, so I'm thinking that the SOAP content I generating against is wrong, in size and all.
If I fix issue 1, perhaps the rest of my code works fine.
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
<s:Body s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<q1:SendAndCommit xmlns:q1="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/Request">
<SendAndCommitSource href="#id1"/>
</q1:SendAndCommit>
<q2:Transaction id="id1" xsi:type="q2:Transaction" xmlns:q2="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/encodedTypes">
<ExactID xsi:type="xsd:string">AH2824-05</ExactID>
<Password xsi:type="xsd:string">0g4tu7pj1hb88q5d8xa55dlhvhvwlm3r</Password>
<Transaction_Type xsi:type="xsd:string">00</Transaction_Type>
<DollarAmount xsi:type="xsd:string">99.20</DollarAmount>
<Card_Number xsi:type="xsd:string">4111111111111111</Card_Number>
<Expiry_Date xsi:type="xsd:string">1215</Expiry_Date>
<CardHoldersName xsi:type="xsd:string">Joe Smoe</CardHoldersName>
<CVDCode xsi:type="xsd:string">999</CVDCode>
<Reference_No xsi:type="xsd:string">CA-Test4</Reference_No>
<Client_IP xsi:type="xsd:string">::1</Client_IP>
<Client_Email xsi:type="xsd:string">xxxxxxx@gmail.com</Client_Email>
<Currency xsi:type="xsd:string">USD</Currency>
<Address href="#id2"/>
</q2:Transaction>
<q3:Address_Type id="id2" xsi:type="q3:Address_Type" xmlns:q3="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/encodedTypes">
<Address1 xsi:type="xsd:string">1234 Main Street</Address1>
<Address2 xsi:type="xsd:string"/>
<City xsi:type="xsd:string">Huntington Beach</City>
<State xsi:type="xsd:string">CA</State>
<Zip xsi:type="xsd:string">92648</Zip>
<CountryCode xsi:type="xsd:string">US</CountryCode>
</q3:Address_Type>
</s:Body>
</s:Envelope>
Issue 2:
This is my BeforeSendRequest. Im not sure how to check the SOAP to make sure if the header has been altered properly before transmitting, but the handler does run.
Public Function BeforeSendRequest( _
ByRef request As Message,
ByVal channel As IClientChannel) As Object Implements IClientMessageInspector.BeforeSendRequest
Dim buffer As MessageBuffer = request.CreateBufferedCopy(Int32.MaxValue)
request = buffer.CreateMessage
Dim msg As Message = buffer.CreateMessage
Dim encoder As ASCIIEncoding = New ASCIIEncoding
Dim sb As StringBuilder = New StringBuilder
Dim xmlSettings As New XmlWriterSettings
xmlSettings.OmitXmlDeclaration = True
Dim xmlWriter As XmlWriter = xmlWriter.Create(sb, xmlSettings)
Dim writer As XmlDictionaryWriter = XmlDictionaryWriter.CreateDictionaryWriter(xmlWriter)
msg.WriteStartEnvelope(writer)
msg.WriteStartBody(writer)
msg.WriteBodyContents(writer)
xmlWriter.WriteEndElement()
xmlWriter.WriteEndElement()
writer.Flush()
Dim body As String = sb.ToString.Replace(" />", "/>")
Dim xml_bytes() As Byte = encoder.GetBytes(body)
Dim sha1_crypto As SHA1CryptoServiceProvider = New SHA1CryptoServiceProvider
Dim hash As String = BitConverter.ToString(sha1_crypto.ComputeHash(xml_bytes)).Replace("-", "")
Dim hashed_content As String = hash.ToLower
Dim m_method As String = "POST"
Dim m_type As String = "application/xml"
Dim m_time As String = DateTime.UtcNow.ToString("yyyy-MM-ddTHH:mm:ssZ")
Dim m_hashData As String = m_method & vbLf & m_type & vbLf & hashed_content & vbLf & m_time & vbLf & _endPoint_Uri
Dim m_hmac_sha1 As HMAC = New HMACSHA1(Encoding.UTF8.GetBytes(_hmac))
Dim m_hmac_data() As Byte = m_hmac_sha1.ComputeHash(Encoding.UTF8.GetBytes(m_hashData))
Dim m_base64_hash As String = Convert.ToBase64String(m_hmac_data)
Dim httpRequestMessage As HttpRequestMessageProperty
Dim httpRequestMessageObject As Object = Nothing
If request.Properties.TryGetValue(HttpRequestMessageProperty.Name, httpRequestMessageObject) Then
httpRequestMessage = CType(httpRequestMessageObject, HttpRequestMessageProperty)
httpRequestMessage.Headers("x-gge4-date") = m_time
httpRequestMessage.Headers("x-gge4-content-sha1") = hashed_content
httpRequestMessage.Headers("Authorization") = "GGE4_API " & _keyID & ":" & m_base64_hash
Else
httpRequestMessage = New HttpRequestMessageProperty
httpRequestMessage.Headers("x-gge4-date") = m_time
httpRequestMessage.Headers("x-gge4-content-sha1") = hashed_content
httpRequestMessage.Headers("Authorization") = "GGE4_API " & _keyID & ":" & m_base64_hash
request.Properties.Add(HttpRequestMessageProperty.Name, httpRequestMessage)
End If
Return Nothing
End Function
Issue 3:
My Transmit Code, I'm quite sure I got this right this time. I made a Service Reference, and not a web reference this time. I sort of used the same code I used for paypal, but added the endpoint behavior, so the authentication header would be added in the Soap Request.
Using client = New ServiceSoapClient(New BasicHttpsBinding(), remoteAddress)
client.ChannelFactory.Endpoint.EndpointBehaviors.Add(New HMAC_SR_Header_Behavior(
uRequest.eXact.HMAC_ID,
uRequest.eXact.HMAC_Key,
m_endpointUri
)
)
Dim responseType As New TransactionResult
responseType = client.SendAndCommit(ppRequest)
ppResponse = responseType
End Using
FYI:
The FirstData support site was useless. All they do there is mobile stuff, Perl, Ruby, Rest. I got crickets from the site, and deaf ears.
[edited] took my personal information out
modified 30-Jun-15 12:47pm.
|
|
|
|
|
Edited to make XML readable
|
|
|
|
|
|
I got schooled in this. So when you send a SOAP request, you can't use the actual header to measure with, you have to make a copy of the header.
When you copy the header using XMLWriter in string format, it makes a UTF-16 copy and not a UTF8. So you have to make a memory stream copy, and set the encoding to UTF8.
Now the subject of empty elements. XMLWriter by Microsoft makes <element> instead of the short form <element>. So that's one of the reasons I could not match the content digest.
The XMLWriter cannot be programmed to do Empty Short tags, and will always default <element>, where the SOAP request will instead do the short format <element>.
Finally, after getting the copy of the request to exactly match what was being transmitted, the First Data server said the it didn't match.
So I think the issue is on the First Data side, there open source code running on an Apache Server. They must consume the request first, and then take a measurement of the body.
I suspect the same issue with the long and short empty element exist in their code, where the short tag version was converted to the long format, and then they made there HMAC calc.
If you search on the subject, there's nothing using visual basic. I wonder if C# would of gave different output and results.
Comments are welcomed on this.
|
|
|
|
|
I got issue 1 to calculate right finally.
I pasted the actual content into a string calculated against it, and changed the type to text/xml.
This part of the code doesnt work right. That's what I get for copying code from the internet.
The XML stuff, doesn't appeared to be used at all, so I'm not sure of the purpose of it.
I guess the question is, how to get the body from the copy of the request?, to calculate against.
Public Function BeforeSendRequest( _
ByRef request As Message,
ByVal channel As IClientChannel) As Object Implements IClientMessageInspector.BeforeSendRequest
Dim buffer As MessageBuffer = request.CreateBufferedCopy(Int32.MaxValue)
request = buffer.CreateMessage
Dim msg As Message = buffer.CreateMessage
Dim encoder As ASCIIEncoding = New ASCIIEncoding
Dim sb As StringBuilder = New StringBuilder
Dim xmlSettings As New XmlWriterSettings
xmlSettings.OmitXmlDeclaration = True
Dim xmlWriter As XmlWriter = xmlWriter.Create(sb, xmlSettings)
Dim writer As XmlDictionaryWriter = XmlDictionaryWriter.CreateDictionaryWriter(xmlWriter)
msg.WriteStartEnvelope(writer)
msg.WriteStartBody(writer)
msg.WriteBodyContents(writer)
xmlWriter.WriteEndElement()
xmlWriter.WriteEndElement()
writer.Flush()
Dim body As String = sb.ToString.Replace(" />", "/>")
Dim xml_bytes() As Byte = encoder.GetBytes(body)
|
|
|
|
|
I removed the msg.WriteStartHeader and the end element to just get the body only.
Still can't authenticate, but I checked the response message, and the new elements were not there.
So now I'm down to that part, hopefully I'll figure it out today, then it should work properly.
Public Function BeforeSendRequest( _
ByRef request As Message,
ByVal channel As IClientChannel) As Object Implements IClientMessageInspector.BeforeSendRequest
Dim buffer As MessageBuffer = request.CreateBufferedCopy(Int32.MaxValue)
request = buffer.CreateMessage
Dim msg As Message = buffer.CreateMessage
Dim encoder As ASCIIEncoding = New ASCIIEncoding
Dim sb As StringBuilder = New StringBuilder
Dim xmlSettings As New XmlWriterSettings
xmlSettings.OmitXmlDeclaration = True
Dim xmlWriter As XmlWriter = xmlWriter.Create(sb, xmlSettings)
Dim writer As XmlDictionaryWriter = XmlDictionaryWriter.CreateDictionaryWriter(xmlWriter)
'Just grab the body of the request to generate the HMAC
msg.WriteStartBody(writer)
msg.WriteBodyContents(writer)
xmlWriter.WriteEndElement()
writer.Flush()
Dim body As String = sb.ToString.Replace(" />", "/>")
Dim xml_bytes() As Byte = encoder.GetBytes(body)
'SHA1 hash on XML string
Dim sha1_crypto As SHA1CryptoServiceProvider = New SHA1CryptoServiceProvider
Dim hash As String = BitConverter.ToString(sha1_crypto.ComputeHash(xml_bytes)).Replace("-", "")
Dim hashed_content As String = hash.ToLower
'assign values to hashing and header variables
Dim m_method As String = "POST"
Dim m_type As String = "text/xml"
Dim m_time As String = DateTime.UtcNow.ToString("yyyy-MM-ddTHH:mm:ssZ")
Dim m_hashData As String = m_method & vbLf & m_type & vbLf & hashed_content & vbLf & m_time & vbLf & _endPoint_Uri
'Compute the HMAC and convert to a base64 hash
Dim m_hmac_sha1 As HMAC = New HMACSHA1(Encoding.UTF8.GetBytes(_hmac))
Dim m_hmac_data() As Byte = m_hmac_sha1.ComputeHash(Encoding.UTF8.GetBytes(m_hashData))
Dim m_base64_hash As String = Convert.ToBase64String(m_hmac_data)
Dim httpRequestMessage As HttpRequestMessageProperty
Dim httpRequestMessageObject As Object = Nothing
'This part must not be working - The header elements just wont add to the message
If request.Properties.TryGetValue(HttpRequestMessageProperty.Name, httpRequestMessageObject) Then
'This block never runs, but is here in case the condition is true
httpRequestMessage = CType(httpRequestMessageObject, HttpRequestMessageProperty)
httpRequestMessage.Headers("x-gge4-date") = m_time
httpRequestMessage.Headers("x-gge4-content-sha1") = hashed_content
httpRequestMessage.Headers("authorization") = "gge4_api " & _keyID & ":" & m_base64_hash
Else
'This code block here doesn't seem to add the header elements
httpRequestMessage = New HttpRequestMessageProperty
httpRequestMessage.Headers("x-gge4-date") = m_time
httpRequestMessage.Headers("x-gge4-content-sha1") = hashed_content
httpRequestMessage.Headers("authorization") = "gge4_api " & _keyID & ":" & m_base64_hash
request.Properties.Add(HttpRequestMessageProperty.Name, httpRequestMessage)
End If
Return Nothing
End Function
|
|
|
|
|
Now I can see there's a difference, but not sure if which direction to go.
I tried just getting the body and hashing, but was off.
This is what I hash against
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><q1:SendAndCommit xmlns:q1="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/Request"><SendAndCommitSource href="#id1"/></q1:SendAndCommit><q2:Transaction id="id1" xsi:type="q2:Transaction" xmlns:q2="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/encodedTypes"><ExactID xsi:type="xsd:string">AH2824-05</ExactID><Password xsi:type="xsd:string">0g4tu7pj1hb88q5d8xa55dlhvhvwlm3r</Password><Transaction_Type xsi:type="xsd:string">00</Transaction_Type><DollarAmount xsi:type="xsd:string">99.20</DollarAmount><Card_Number xsi:type="xsd:string">4111111111111111</Card_Number><Expiry_Date xsi:type="xsd:string">1215</Expiry_Date><CardHoldersName xsi:type="xsd:string">Jim Kirker</CardHoldersName><CVDCode xsi:type="xsd:string">999</CVDCode><Reference_No xsi:type="xsd:string">CA-Test</Reference_No><Client_IP xsi:type="xsd:string">::1</Client_IP><Client_Email xsi:type="xsd:string">jkirkerx@gmail.com</Client_Email><Currency xsi:type="xsd:string">USD</Currency><Address href="#id2"/></q2:Transaction><q3:Address_Type id="id2" xsi:type="q3:Address_Type" xmlns:q3="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/encodedTypes"><Address1 xsi:type="xsd:string">18751 Park Haven Lane</Address1><Address2 xsi:type="xsd:string"></Address2><City xsi:type="xsd:string">Huntington Beach</City><State xsi:type="xsd:string">CA</State><Zip xsi:type="xsd:string">92648</Zip><CountryCode xsi:type="xsd:string">US</CountryCode></q3:Address_Type></s:Body></s:Envelope>
This is what's transmitted, using Fiddler Raw View
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Header><VsDebuggerCausalityData xmlns="http://schemas.microsoft.com/vstudio/diagnostics/servicemodelsink">uIDPo9SVGdFyrSRIggrGNQtX310AAAAAhRk+BZwrlEmerSG7e6xTXgkQ9xZ9IRxJmASnRkw2CLgACQAA</VsDebuggerCausalityData></s:Header><s:Body s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><q1:SendAndCommit xmlns:q1="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/Request"><SendAndCommitSource href="#id1"/></q1:SendAndCommit><q2:Transaction id="id1" xsi:type="q2:Transaction" xmlns:q2="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/encodedTypes"><ExactID xsi:type="xsd:string">AH2824-05</ExactID><Password xsi:type="xsd:string">0g4tu7pj1hb88q5d8xa55dlhvhvwlm3r</Password><Transaction_Type xsi:type="xsd:string">00</Transaction_Type><DollarAmount xsi:type="xsd:string">99.20</DollarAmount><Card_Number xsi:type="xsd:string">4111111111111111</Card_Number><Expiry_Date xsi:type="xsd:string">1215</Expiry_Date><CardHoldersName xsi:type="xsd:string">Jim Kirker</CardHoldersName><CVDCode xsi:type="xsd:string">999</CVDCode><Reference_No xsi:type="xsd:string">CA-Test</Reference_No><Client_IP xsi:type="xsd:string">::1</Client_IP><Client_Email xsi:type="xsd:string">jkirkerx@gmail.com</Client_Email><Currency xsi:type="xsd:string">USD</Currency><Address href="#id2"/></q2:Transaction><q3:Address_Type id="id2" xsi:type="q3:Address_Type" xmlns:q3="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/encodedTypes"><Address1 xsi:type="xsd:string">18751 Park Haven Lane</Address1><Address2 xsi:type="xsd:string"/><City xsi:type="xsd:string">Huntington Beach</City><State xsi:type="xsd:string">CA</State><Zip xsi:type="xsd:string">92648</Zip><CountryCode xsi:type="xsd:string">US</CountryCode></q3:Address_Type></s:Body></s:Envelope>
Dim sb As StringBuilder = New StringBuilder
Dim xmlSettings As New XmlWriterSettings
xmlSettings.OmitXmlDeclaration = True
Dim xmlWriter As XmlWriter = xmlWriter.Create(sb, xmlSettings)
Dim writer As XmlDictionaryWriter = XmlDictionaryWriter.CreateDictionaryWriter(xmlWriter)
'Just grab the body of the request to generate the HMAC
msg.WriteStartEnvelope(writer) 'If i remark this out, I get just the body to hash against
msg.WriteStartBody(writer)
msg.WriteBodyContents(writer)
xmlWriter.WriteEndElement()
xmlWriter.WriteEndElement() 'If i remark this out, I get just the body to hash against
writer.Flush()
Dim body As String = sb.ToString.Replace(" />", "/>")
Dim xml_bytes() As Byte = encoder.GetBytes(body)
|
|
|
|
|
Hello !
I'm using vb.net and Entity framework 6.
I have a situation , when I have several SQL queries that are generated on runtime( different query's type : Delete or Update ) applied to different tables.
I know that I can execute them one by one with
Context.Database.ExecuteSqlCommand using multiple database hit.
Is there any way to execute them using one database hit ?
Thank you !
modified 28-Jun-15 2:05am.
|
|
|
|
|
Make sure that each SQL-statement is terminated by a semicolon. Concatenate them. Execute that batch statement with Context.Database.ExecuteSqlCommand(..).
If the brain were so simple we could understand it, we would be so simple we couldn't. — Lyall Watson
|
|
|
|
|
Please can you explain your idea , with my below example :
For the moment I'm using this , but this need 2 database hit:
sql1="UPDATE MyTable1 SET Name = 'Test2' WHERE Id = 2"
sql2="Delete * from TB2 WHERE Id = 31"
context.Database.ExecuteSqlCommand(sql1)
context.Database.ExecuteSqlCommand(sql2)
Now , using your suggestion , I have this :
context.Database.ExecuteSqlCommand(sql1 & ";" & sql2)
But doesn't work.
|
|
|
|
|
Apparently EF doesn't support batching, I didn't expect that. You would need to use SqlCommand.ExecuteNonQuery(..)[^] with ADO.NET then instead.
If the brain were so simple we could understand it, we would be so simple we couldn't. — Lyall Watson
|
|
|
|
|
ok , but is there any way to extract the current connection string from DBcontext ?
modified 28-Jun-15 5:43am.
|
|
|
|
|
I don't know. But it should be rather easily accessible from the app.config.
If the brain were so simple we could understand it, we would be so simple we couldn't. — Lyall Watson
|
|
|
|
|
A little Google goes a long way:
string connStr = context.Database.Connection.ConnectionString;
Entity Framework does NOT support batching.
|
|
|
|
|
I've already tried this.
But I get an error : Invalid connection string"
|
|
|
|
|
Well, that's where you get it from. If you're using it incorrectly, I can't do anything about that.
|
|
|
|
|
You didn't test your DELETE command in SQL Manager did you?
Your DELETE command is bad. You don't put a "*" in it. It's just
DELETE FROM TB2 WHERE Id = 31
|
|
|
|
|
It's a typing mistake. I have the query exactly like your query.
But the last command with merged queries doesn't work.
|
|
|
|
|
Hello !
I'm using vb.net 2013 , sql server 2008R2 , Entity framework 6 with DBContext database first.
when the user delete an object on an entity , I want to create a kind of "recovery script" and save it to a file. If this script is called by the user , he should recreate the deleted object again.
There are 2 cases :
- The record has no childs
- The record has childs ( so the recovery script should recreate the childs too)
I don't know if this will be a sql script , because when thi script will be used , the "Deleted object" should be inserted on an entity , and after should be the user that should decide to save it or no on database. Also before this object be saved on database , some testing actions will be made ( the same actions with the case when a new record is created )
any idea how can I do this ?
Thank you !
|
|
|
|
|
Holy crap this is over complicating things.
You've already been told how to do this. Just add a field to the root object that you can delete as "Deleted". That's it. No complicated "scripting", validation, reinserting, recreating child objects, blah, blah, blah.
One very simple operation undeletes an object and doesn't bloat the crap out of your database with "scripts" to recreate anything.
|
|
|
|
|
I have done what you have suggested.
So if a user do a "Soft" delete , I set the column to "deleted".
But the user can delete these "soft deleted records" , and on this case the record is deleted from database.
For this case I want to save a "Recovery script" ( similar to windows recycle bin. when a file is deleted from recycle bin too , a recovery process should be made if necessary to recover this file. ).
|
|
|
|
|
satc wrote: similar to windows recycle bin
That's the 'soft' delete flag being set. The hard delete is the same as when you empty the recycle bin, after which the file is really gone. However, if you want to recover them after that you just need to have another value that indicates hard delete.
|
|
|
|
|
What's happen if the files are deletes from "Recycle bin " ? The are gone ???!!! No. The can be recovered using Recovering software.
A similar behavior I want to do with records. When "a soft deleted record ") ( that has the "deleted" value=rue" ( is deleted , I want to have a way to recover. But keeping another field that indicate "hard" delete is not what I want. I want that a user to be able to really delete a record from database. And if he want he can recover ( just like on recycle bin for files.
|
|
|
|
|
satc wrote: The can be recovered using Recovering software.
Those files can not always be recovered; the space is marked as available, and could be (partially) overwritten. Still, you are comparing apples and oranges - the recovery software does not use a script.
Your users simply should not have the right to delete anything if they cannot be trusted with a recycle bin.
satc wrote: And if he want he can recover just like on recycle bin for files.
Then stop using a database completely and use the filesystem.
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
|
|
|
|
|
Quote: Then stop using a database completely and use the filesystem
Really ??
Please give me some idea how can I do this.
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
