HTTPAPI and Custom Authorization Header

[TheZenbudda]

I need to be able to do this:

rc = http_setOption( 'Authorization'                                 
                   : 'myEncodedApiKey123KuanYa#/0*3' );

The reason I need to be able to do this is because the rest request requires an api key that is not userid/password based. Any thoughts?

[JonBoy]

So what have you tried so far? It would seem to me you need to use http_setAuth()

See this thread for a similar situation http://www.scottklement.com/archives.../msg00025.html

[TheZenbudda]

So what have you tried so far? It would seem to me you need to use http_setAuth()

See this thread for a similar situation http://www.scottklement.com/archives.../msg00025.html

http_setAuth() seems to require a userid and password, which I will not have. I tried decoding the 64bit api key i was given, and it looks like non-sense so it's not a userid/password combination.

[JonBoy]

Sorry missed that. So used to seeing requests for user authentication.

Does the HTTP_POINT_ADDL_HEADER section in this post work for you. Sounds like your situation http://www.scottklement.com/archives.../msg00038.html it is towards th end of the post.

[Scott Klement]

Http_setOption() will only set options known to HTTPAPI, so that won't work here. As Jon pointed out, if you want to add your own custom headers, that would be done with the HTTP_POINT_ADDL_HEADER exit procedure. You can use that to put anything you like into the HTTP headers/

[TheZenbudda]

JonBoy and Scott,

Thanks for your responses. I'm scrambling trying to prove HTTPAPI is a viable solution for http rest requests directly from the IBM i. The last hurdle is trying to read the response headers. For some reason this 3rd party service returns data in the header response that is needed for other rest requests. /sigh i'll create another thread for that one. I used the example listed in the link above to try to code my own headers. I hit another snag and as soon as I am able to identify it, I will post it.

Thanks again!

[Scott Klement]

Hmm... I didn't see another thread?

If you need to retrieve a header, there's a procedure called http_header() that should work. I must admit, this one is not used very often... so probably hasn't been tested as heavily as some of the others. But, it's worth looking into:

You'd run this after the HTTP request is complete:

myString = http_header('the-header-name');

myString should now contain the contents of the header.

[TheZenbudda]

Scott,

Thanks for your response. I did not want to muddy up this post with a problem I am having regarding http_stmf().

I created a new thread here:

http://www.code400.com/forum/forum/iseries-programming-languages/rpg-rpgle/145280-httpapi-preventing-content-length-from-being-inserted-into-header

Also, the only rest request I have working at this point uses http_setAuth() to add basic authorization to the header. However, when I call another request (which does not need the basic auth header), the header still contains the basic authorization from the previous request. How would I clear the header each time if one job needs to make multiple requests?

[TheZenbudda]

My example above will cause your request to fail if you do not put a CRLF at the end of the custom header.

d CRLF            c                   const(x'0d25')

pHeaders = 'Authorization: ' +                                  
          'yOur64bitencodedkeyhereenclosedinsinglequotes'+ CRLF;

Thanks for your help Scott!

[TheZenbudda]

The code was wrong It should be:

pHeaders = 'Authorization: ' +                                  
          'yOur64bitencodedkeyhereenclosedinsinglequotes' + CRLF;