Can't get the hashed content right - Visual Basic Discussion Boards

Google has many, all there for the taking: https://www.google.com/search?q=Delegate+vb.net+example[^].

Perhaps there's someone out there that has done FirstData G4 SOAP V14 in VB, and can checkout or point out any mistakes I made.

So I get this error upon transmitting
The HTTP request is unauthorized with client authentication scheme 'Anonymous'. The authentication header received from the server was ''.
So I'm figuring my HMAC header authentication is way off, and i get a generic response back.

I have a XML version that works just fine. And the G4 Sandbox has a HMAC Calculator tool, that I can use to compare and generate the values.

Issue 1:
But I'm not sure if what I'm pasting in as content is correct, in order to validate the code block, 2 blocks below.
example: Not sure if this is the correct format of SOAP Content, so I can run the FirstData HMAC Generate to confirm my values are right.
I using the same code sort of, to generate the HMAC stuff.
I just can't get a match of values, I'm way off, so I'm thinking that the SOAP content I generating against is wrong, in size and all.
If I fix issue 1, perhaps the rest of my code works fine.

XML

<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
    <s:Body s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
        <q1:SendAndCommit xmlns:q1="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/Request">
            <SendAndCommitSource href="#id1"/>
        </q1:SendAndCommit>
        <q2:Transaction id="id1" xsi:type="q2:Transaction" xmlns:q2="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/encodedTypes">
            <ExactID xsi:type="xsd:string">AH2824-05</ExactID>
            <Password xsi:type="xsd:string">0g4tu7pj1hb88q5d8xa55dlhvhvwlm3r</Password>
            <Transaction_Type xsi:type="xsd:string">00</Transaction_Type>
            <DollarAmount xsi:type="xsd:string">99.20</DollarAmount>
            <Card_Number xsi:type="xsd:string">4111111111111111</Card_Number>
            <Expiry_Date xsi:type="xsd:string">1215</Expiry_Date>
            <CardHoldersName xsi:type="xsd:string">Joe Smoe</CardHoldersName>
            <CVDCode xsi:type="xsd:string">999</CVDCode>
            <Reference_No xsi:type="xsd:string">CA-Test4</Reference_No>
            <Client_IP xsi:type="xsd:string">::1</Client_IP>
            <Client_Email xsi:type="xsd:string">xxxxxxx@gmail.com</Client_Email>
            <Currency xsi:type="xsd:string">USD</Currency>
            <Address href="#id2"/>
        </q2:Transaction>
        <q3:Address_Type id="id2" xsi:type="q3:Address_Type" xmlns:q3="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/encodedTypes">
            <Address1 xsi:type="xsd:string">1234 Main Street</Address1>
            <Address2 xsi:type="xsd:string"/>
            <City xsi:type="xsd:string">Huntington Beach</City>
            <State xsi:type="xsd:string">CA</State>
            <Zip xsi:type="xsd:string">92648</Zip>
            <CountryCode xsi:type="xsd:string">US</CountryCode>
        </q3:Address_Type>
    </s:Body>
</s:Envelope>

Issue 2:
This is my BeforeSendRequest. Im not sure how to check the SOAP to make sure if the header has been altered properly before transmitting, but the handler does run.

VB

Public Function BeforeSendRequest( _
        ByRef request As Message,
        ByVal channel As IClientChannel) As Object Implements IClientMessageInspector.BeforeSendRequest

        Dim buffer As MessageBuffer = request.CreateBufferedCopy(Int32.MaxValue)
        request = buffer.CreateMessage

        Dim msg As Message = buffer.CreateMessage
        Dim encoder As ASCIIEncoding = New ASCIIEncoding

        Dim sb As StringBuilder = New StringBuilder
        Dim xmlSettings As New XmlWriterSettings
        xmlSettings.OmitXmlDeclaration = True

        Dim xmlWriter As XmlWriter = xmlWriter.Create(sb, xmlSettings)
        Dim writer As XmlDictionaryWriter = XmlDictionaryWriter.CreateDictionaryWriter(xmlWriter)

        msg.WriteStartEnvelope(writer)
        msg.WriteStartBody(writer)
        msg.WriteBodyContents(writer)
        xmlWriter.WriteEndElement()
        xmlWriter.WriteEndElement()

        writer.Flush()

        Dim body As String = sb.ToString.Replace(" />", "/>")
        Dim xml_bytes() As Byte = encoder.GetBytes(body)

        'SHA1 hash on XML string
        Dim sha1_crypto As SHA1CryptoServiceProvider = New SHA1CryptoServiceProvider
        Dim hash As String = BitConverter.ToString(sha1_crypto.ComputeHash(xml_bytes)).Replace("-", "")
        Dim hashed_content As String = hash.ToLower

        'assign values to hashing and header variables
        Dim m_method As String = "POST"
        Dim m_type As String = "application/xml"
        Dim m_time As String = DateTime.UtcNow.ToString("yyyy-MM-ddTHH:mm:ssZ")
        Dim m_hashData As String = m_method & vbLf & m_type & vbLf & hashed_content & vbLf & m_time & vbLf & _endPoint_Uri

        'Compute the HMAC and convert to a base64 hash
        Dim m_hmac_sha1 As HMAC = New HMACSHA1(Encoding.UTF8.GetBytes(_hmac))
        Dim m_hmac_data() As Byte = m_hmac_sha1.ComputeHash(Encoding.UTF8.GetBytes(m_hashData))
        Dim m_base64_hash As String = Convert.ToBase64String(m_hmac_data)

        Dim httpRequestMessage As HttpRequestMessageProperty
        Dim httpRequestMessageObject As Object = Nothing

        If request.Properties.TryGetValue(HttpRequestMessageProperty.Name, httpRequestMessageObject) Then

            httpRequestMessage = CType(httpRequestMessageObject, HttpRequestMessageProperty)
            httpRequestMessage.Headers("x-gge4-date") = m_time
            httpRequestMessage.Headers("x-gge4-content-sha1") = hashed_content
            httpRequestMessage.Headers("Authorization") = "GGE4_API " & _keyID & ":" & m_base64_hash

        Else

            httpRequestMessage = New HttpRequestMessageProperty
            httpRequestMessage.Headers("x-gge4-date") = m_time
            httpRequestMessage.Headers("x-gge4-content-sha1") = hashed_content
            httpRequestMessage.Headers("Authorization") = "GGE4_API " & _keyID & ":" & m_base64_hash
            request.Properties.Add(HttpRequestMessageProperty.Name, httpRequestMessage)

        End If

        Return Nothing

    End Function

Issue 3:

My Transmit Code, I'm quite sure I got this right this time. I made a Service Reference, and not a web reference this time. I sort of used the same code I used for paypal, but added the endpoint behavior, so the authentication header would be added in the Soap Request.

VB

Using client = New ServiceSoapClient(New BasicHttpsBinding(), remoteAddress)
                client.ChannelFactory.Endpoint.EndpointBehaviors.Add(New HMAC_SR_Header_Behavior(
                        uRequest.eXact.HMAC_ID,
                        uRequest.eXact.HMAC_Key,
                        m_endpointUri
                    )
                )

                Dim responseType As New TransactionResult
                responseType = client.SendAndCommit(ppRequest)
                ppResponse = responseType

            End Using

FYI:
The FirstData support site was useless. All they do there is mobile stuff, Perl, Ruby, Rest. I got crickets from the site, and deaf ears.

[edited] took my personal information out

modified 30-Jun-15 12:47pm.

Edited to make XML readable

Wrong is evil and must be defeated. - Jeff Ello

Thanks!

I got schooled in this. So when you send a SOAP request, you can't use the actual header to measure with, you have to make a copy of the header.

When you copy the header using XMLWriter in string format, it makes a UTF-16 copy and not a UTF8. So you have to make a memory stream copy, and set the encoding to UTF8.

Now the subject of empty elements. XMLWriter by Microsoft makes <element> instead of the short form <element>. So that's one of the reasons I could not match the content digest.
The XMLWriter cannot be programmed to do Empty Short tags, and will always default <element>, where the SOAP request will instead do the short format <element>.

Finally, after getting the copy of the request to exactly match what was being transmitted, the First Data server said the it didn't match.

So I think the issue is on the First Data side, there open source code running on an Apache Server. They must consume the request first, and then take a measurement of the body.
I suspect the same issue with the long and short empty element exist in their code, where the short tag version was converted to the long format, and then they made there HMAC calc.
If you search on the subject, there's nothing using visual basic. I wonder if C# would of gave different output and results.

Comments are welcomed on this.

I got issue 1 to calculate right finally.
I pasted the actual content into a string calculated against it, and changed the type to text/xml.

This part of the code doesnt work right. That's what I get for copying code from the internet.
The XML stuff, doesn't appeared to be used at all, so I'm not sure of the purpose of it.
I guess the question is, how to get the body from the copy of the request?, to calculate against.

Public Function BeforeSendRequest( _
        ByRef request As Message,
        ByVal channel As IClientChannel) As Object Implements IClientMessageInspector.BeforeSendRequest

        Dim buffer As MessageBuffer = request.CreateBufferedCopy(Int32.MaxValue)
        request = buffer.CreateMessage

        Dim msg As Message = buffer.CreateMessage
        Dim encoder As ASCIIEncoding = New ASCIIEncoding

        Dim sb As StringBuilder = New StringBuilder
        Dim xmlSettings As New XmlWriterSettings
        xmlSettings.OmitXmlDeclaration = True

        Dim xmlWriter As XmlWriter = xmlWriter.Create(sb, xmlSettings)
        Dim writer As XmlDictionaryWriter = XmlDictionaryWriter.CreateDictionaryWriter(xmlWriter)

        msg.WriteStartEnvelope(writer)
        msg.WriteStartBody(writer)
        msg.WriteBodyContents(writer)
        xmlWriter.WriteEndElement()
        xmlWriter.WriteEndElement()

        writer.Flush()

        Dim body As String = sb.ToString.Replace(" />", "/>")
        Dim xml_bytes() As Byte = encoder.GetBytes(body)

So I finally figured out how to just get the Body of the Message, and calc against it, and veriffied it in the FirstData API Tool
I removed the msg.WriteStartHeader and the end element to just get the body only.
Still can't authenticate, but I checked the response message, and the new elements were not there.
So now I'm down to that part, hopefully I'll figure it out today, then it should work properly.

Public Function BeforeSendRequest( _
        ByRef request As Message,
        ByVal channel As IClientChannel) As Object Implements IClientMessageInspector.BeforeSendRequest

        Dim buffer As MessageBuffer = request.CreateBufferedCopy(Int32.MaxValue)
        request = buffer.CreateMessage

        Dim msg As Message = buffer.CreateMessage
        Dim encoder As ASCIIEncoding = New ASCIIEncoding

        Dim sb As StringBuilder = New StringBuilder
        Dim xmlSettings As New XmlWriterSettings
        xmlSettings.OmitXmlDeclaration = True

        Dim xmlWriter As XmlWriter = xmlWriter.Create(sb, xmlSettings)
        Dim writer As XmlDictionaryWriter = XmlDictionaryWriter.CreateDictionaryWriter(xmlWriter)

        'Just grab the body of the request to generate the HMAC
        msg.WriteStartBody(writer)
        msg.WriteBodyContents(writer)
        xmlWriter.WriteEndElement()
        writer.Flush()

        Dim body As String = sb.ToString.Replace(" />", "/>")
        Dim xml_bytes() As Byte = encoder.GetBytes(body)

        'SHA1 hash on XML string
        Dim sha1_crypto As SHA1CryptoServiceProvider = New SHA1CryptoServiceProvider
        Dim hash As String = BitConverter.ToString(sha1_crypto.ComputeHash(xml_bytes)).Replace("-", "")
        Dim hashed_content As String = hash.ToLower

        'assign values to hashing and header variables
        Dim m_method As String = "POST"
        Dim m_type As String = "text/xml"
        Dim m_time As String = DateTime.UtcNow.ToString("yyyy-MM-ddTHH:mm:ssZ")
        Dim m_hashData As String = m_method & vbLf & m_type & vbLf & hashed_content & vbLf & m_time & vbLf & _endPoint_Uri

        'Compute the HMAC and convert to a base64 hash
        Dim m_hmac_sha1 As HMAC = New HMACSHA1(Encoding.UTF8.GetBytes(_hmac))
        Dim m_hmac_data() As Byte = m_hmac_sha1.ComputeHash(Encoding.UTF8.GetBytes(m_hashData))
        Dim m_base64_hash As String = Convert.ToBase64String(m_hmac_data)

        Dim httpRequestMessage As HttpRequestMessageProperty
        Dim httpRequestMessageObject As Object = Nothing

        'This part must not be working - The header elements just wont add to the message
        If request.Properties.TryGetValue(HttpRequestMessageProperty.Name, httpRequestMessageObject) Then
            'This block never runs, but is here in case the condition is true
            httpRequestMessage = CType(httpRequestMessageObject, HttpRequestMessageProperty)
            httpRequestMessage.Headers("x-gge4-date") = m_time
            httpRequestMessage.Headers("x-gge4-content-sha1") = hashed_content
            httpRequestMessage.Headers("authorization") = "gge4_api " & _keyID & ":" & m_base64_hash

        Else
            'This code block here doesn't seem to add the header elements
            httpRequestMessage = New HttpRequestMessageProperty
            httpRequestMessage.Headers("x-gge4-date") = m_time
            httpRequestMessage.Headers("x-gge4-content-sha1") = hashed_content
            httpRequestMessage.Headers("authorization") = "gge4_api " & _keyID & ":" & m_base64_hash
            request.Properties.Add(HttpRequestMessageProperty.Name, httpRequestMessage)

        End If

        Return Nothing

    End Function

I just can't the hashed content right here. So the first request is what's in StringBullder, and the 2nd request is what's was transmitted to the service
Now I can see there's a difference, but not sure if which direction to go.
I tried just getting the body and hashing, but was off.

This is what I hash against

<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><q1:SendAndCommit xmlns:q1="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/Request"><SendAndCommitSource href="#id1"/></q1:SendAndCommit><q2:Transaction id="id1" xsi:type="q2:Transaction" xmlns:q2="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/encodedTypes"><ExactID xsi:type="xsd:string">AH2824-05</ExactID><Password xsi:type="xsd:string">0g4tu7pj1hb88q5d8xa55dlhvhvwlm3r</Password><Transaction_Type xsi:type="xsd:string">00</Transaction_Type><DollarAmount xsi:type="xsd:string">99.20</DollarAmount><Card_Number xsi:type="xsd:string">4111111111111111</Card_Number><Expiry_Date xsi:type="xsd:string">1215</Expiry_Date><CardHoldersName xsi:type="xsd:string">Jim Kirker</CardHoldersName><CVDCode xsi:type="xsd:string">999</CVDCode><Reference_No xsi:type="xsd:string">CA-Test</Reference_No><Client_IP xsi:type="xsd:string">::1</Client_IP><Client_Email xsi:type="xsd:string">jkirkerx@gmail.com</Client_Email><Currency xsi:type="xsd:string">USD</Currency><Address href="#id2"/></q2:Transaction><q3:Address_Type id="id2" xsi:type="q3:Address_Type" xmlns:q3="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/encodedTypes"><Address1 xsi:type="xsd:string">18751 Park Haven Lane</Address1><Address2 xsi:type="xsd:string"></Address2><City xsi:type="xsd:string">Huntington Beach</City><State xsi:type="xsd:string">CA</State><Zip xsi:type="xsd:string">92648</Zip><CountryCode xsi:type="xsd:string">US</CountryCode></q3:Address_Type></s:Body></s:Envelope>

This is what's transmitted, using Fiddler Raw View

<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Header><VsDebuggerCausalityData xmlns="http://schemas.microsoft.com/vstudio/diagnostics/servicemodelsink">uIDPo9SVGdFyrSRIggrGNQtX310AAAAAhRk+BZwrlEmerSG7e6xTXgkQ9xZ9IRxJmASnRkw2CLgACQAA</VsDebuggerCausalityData></s:Header><s:Body s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><q1:SendAndCommit xmlns:q1="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/Request"><SendAndCommitSource href="#id1"/></q1:SendAndCommit><q2:Transaction id="id1" xsi:type="q2:Transaction" xmlns:q2="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/encodedTypes"><ExactID xsi:type="xsd:string">AH2824-05</ExactID><Password xsi:type="xsd:string">0g4tu7pj1hb88q5d8xa55dlhvhvwlm3r</Password><Transaction_Type xsi:type="xsd:string">00</Transaction_Type><DollarAmount xsi:type="xsd:string">99.20</DollarAmount><Card_Number xsi:type="xsd:string">4111111111111111</Card_Number><Expiry_Date xsi:type="xsd:string">1215</Expiry_Date><CardHoldersName xsi:type="xsd:string">Jim Kirker</CardHoldersName><CVDCode xsi:type="xsd:string">999</CVDCode><Reference_No xsi:type="xsd:string">CA-Test</Reference_No><Client_IP xsi:type="xsd:string">::1</Client_IP><Client_Email xsi:type="xsd:string">jkirkerx@gmail.com</Client_Email><Currency xsi:type="xsd:string">USD</Currency><Address href="#id2"/></q2:Transaction><q3:Address_Type id="id2" xsi:type="q3:Address_Type" xmlns:q3="http://secure2.e-xact.com/vplug-in/transaction/rpc-enc/encodedTypes"><Address1 xsi:type="xsd:string">18751 Park Haven Lane</Address1><Address2 xsi:type="xsd:string"/><City xsi:type="xsd:string">Huntington Beach</City><State xsi:type="xsd:string">CA</State><Zip xsi:type="xsd:string">92648</Zip><CountryCode xsi:type="xsd:string">US</CountryCode></q3:Address_Type></s:Body></s:Envelope>

Dim sb As StringBuilder = New StringBuilder
        Dim xmlSettings As New XmlWriterSettings
        xmlSettings.OmitXmlDeclaration = True

        Dim xmlWriter As XmlWriter = xmlWriter.Create(sb, xmlSettings)
        Dim writer As XmlDictionaryWriter = XmlDictionaryWriter.CreateDictionaryWriter(xmlWriter)

        'Just grab the body of the request to generate the HMAC
        msg.WriteStartEnvelope(writer) 'If i remark this out, I get just the body to hash against
        msg.WriteStartBody(writer)
        msg.WriteBodyContents(writer)
        xmlWriter.WriteEndElement()
        xmlWriter.WriteEndElement() 'If i remark this out, I get just the body to hash against
        writer.Flush()

        Dim body As String = sb.ToString.Replace(" />", "/>")
        Dim xml_bytes() As Byte = encoder.GetBytes(body)

Hello !
I'm using vb.net and Entity framework 6.
I have a situation , when I have several SQL queries that are generated on runtime( different query's type : Delete or Update ) applied to different tables.

I know that I can execute them one by one with

Context.Database.ExecuteSqlCommand

using multiple database hit.

Is there any way to execute them using one database hit ?

Thank you !

modified 28-Jun-15 2:05am.

Make sure that each SQL-statement is terminated by a semicolon. Concatenate them. Execute that batch statement with Context.Database.ExecuteSqlCommand(..).

If the brain were so simple we could understand it, we would be so simple we couldn't. — Lyall Watson

Please can you explain your idea , with my below example :

For the moment I'm using this , but this need 2 database hit:

sql1="UPDATE MyTable1 SET Name = 'Test2' WHERE Id = 2"
sql2="Delete * from TB2 WHERE Id = 31"
context.Database.ExecuteSqlCommand(sql1)
context.Database.ExecuteSqlCommand(sql2)

Now , using your suggestion , I have this :

context.Database.ExecuteSqlCommand(sql1 & ";" & sql2)

But doesn't work.

Apparently EF doesn't support batching, I didn't expect that. You would need to use SqlCommand.ExecuteNonQuery(..)[^] with ADO.NET then instead.

If the brain were so simple we could understand it, we would be so simple we couldn't. — Lyall Watson

ok , but is there any way to extract the current connection string from DBcontext ?

modified 28-Jun-15 5:43am.

I don't know. But it should be rather easily accessible from the app.config.

If the brain were so simple we could understand it, we would be so simple we couldn't. — Lyall Watson

A little Google goes a long way:

string connStr = context.Database.Connection.ConnectionString;

Entity Framework does NOT support batching.

A guide to posting questions on CodeProject

Click this: Asking questions is a skill.
Seriously, do it.

Dave Kreskowiak

I've already tried this.
But I get an error : Invalid connection string"

Well, that's where you get it from. If you're using it incorrectly, I can't do anything about that.

A guide to posting questions on CodeProject

Click this: Asking questions is a skill.
Seriously, do it.

Dave Kreskowiak

You didn't test your DELETE command in SQL Manager did you?

Your DELETE command is bad. You don't put a "*" in it. It's just

DELETE FROM TB2 WHERE Id = 31

A guide to posting questions on CodeProject

Click this: Asking questions is a skill.
Seriously, do it.

Dave Kreskowiak

It's a typing mistake. I have the query exactly like your query.
But the last command with merged queries doesn't work.

Hello !
I'm using vb.net 2013 , sql server 2008R2 , Entity framework 6 with DBContext database first.

when the user delete an object on an entity , I want to create a kind of "recovery script" and save it to a file. If this script is called by the user , he should recreate the deleted object again.
There are 2 cases :
- The record has no childs
- The record has childs ( so the recovery script should recreate the childs too)

I don't know if this will be a sql script , because when thi script will be used , the "Deleted object" should be inserted on an entity , and after should be the user that should decide to save it or no on database. Also before this object be saved on database , some testing actions will be made ( the same actions with the case when a new record is created )

any idea how can I do this ?
Thank you !

Holy crap this is over complicating things.

You've already been told how to do this. Just add a field to the root object that you can delete as "Deleted". That's it. No complicated "scripting", validation, reinserting, recreating child objects, blah, blah, blah.

One very simple operation undeletes an object and doesn't bloat the crap out of your database with "scripts" to recreate anything.

A guide to posting questions on CodeProject

Click this: Asking questions is a skill.
Seriously, do it.

Dave Kreskowiak

I have done what you have suggested.
So if a user do a "Soft" delete , I set the column to "deleted".
But the user can delete these "soft deleted records" , and on this case the record is deleted from database.
For this case I want to save a "Recovery script" ( similar to windows recycle bin. when a file is deleted from recycle bin too , a recovery process should be made if necessary to recover this file. ).

satc wrote:
similar to windows recycle bin

That's the 'soft' delete flag being set. The hard delete is the same as when you empty the recycle bin, after which the file is really gone. However, if you want to recover them after that you just need to have another value that indicates hard delete.

What's happen if the files are deletes from "Recycle bin " ? The are gone ???!!! No. The can be recovered using Recovering software.
A similar behavior I want to do with records. When "a soft deleted record ") ( that has the "deleted" value=rue" ( is deleted , I want to have a way to recover. But keeping another field that indicate "hard" delete is not what I want. I want that a user to be able to really delete a record from database. And if he want he can recover ( just like on recycle bin for files.

satc wrote:
The can be recovered using Recovering software.

Those files can not always be recovered; the space is marked as available, and could be (partially) overwritten. Still, you are comparing apples and oranges - the recovery software does not use a script.

Your users simply should not have the right to delete anything if they cannot be trusted with a recycle bin.

satc wrote:
And if he want he can recover just like on recycle bin for files.

Then stop using a database completely and use the filesystem.

Bastard Programmer from Hell Suspicious | :suss:

If you can't read my code, try converting it here[^]