Validating the XML Message validation schema

From PlatiOnline.EU
Revision as of 12:10, 2 April 2014 by PlatiOnline (talk | contribs)
Jump to: navigation, search

XML Authorization

Plati Online version 5.x

  1. Post URL: https://secure.plationline.eu/
  2. Request XML validation schema: https://secure.plationline.eu/xml_validation/po.request.v5.xsd
  3. XML_Message validation schema: https://secure.plationline.eu/xml_validation/f_message.auth.v5.xsd

Pseudo-code:

  1. Create the XML_Message;
  2. SOAP 1.1 headers:
    • CONTENT_TYPE = text/xml; charset=utf-8
    • USER_AGENT = PlatiOnline-SOAP
    • SOAPACTION = auth-only
  3. SOAP 1.2 headers:
    • CONTENT_TYPE = application/soap+xml; charset=utf-8; action=auth-only
    • USER_AGENT = PlatiOnline-SOAP
  4. Create a random 32 alphanumeric AES KEY;
  5. Encrypt the AES KEY with the RSA algorithm, this is the value of f_crypt_message tag;
  6. Encrypt the XML_Message with the AES algorithm using the AES KEY and the IV_AUTH, this is the value of f_message tag;
  7. Validate the Request XML using https://secure.plationline.eu/xml_validation/po.request.v5.xsd
  8. Post SOAP (version 1.1 or 1.2) to https://secure.plationline.eu/