[rt-users] Need help getting REST API calls to work using WinHttpRequest from VBA

[Tim Elkin]

Our goal is to create a Ticket in RT using VBA using the WinHttpRequest
object.  We understand that there are 2 login pages involved with RT.

So, first we log into the first RT login page using using a "POST" request
and passing the username and password using the SetCredentials function of
the WinHttpRequest object.  This request appears to return a valid session
cookie which we parse to use in our second WinHttpRequest request.

In making our second request we use a "GET" request setting the 2nd RT
login username and password using the SetCredentials function and in
addition we now are passing the session cookie (that is we send a portion
of the session cookie returned from the previous request) info using the
SetRequestHeader (as in SetRequestHeader "Cookie", mvarSessionCookie ).  In
this second request we are asking for an RT Ticket to be returned using
"https://(our url)/REST/1.0/ticket/(a ticket #)/show".  However, we receive
the 401 Authorization error instead.

Some sample code would be great.


*Below is the code we are using presently to verify that the session cookie
we receive from the 1st RT login page is valid by *

*using a second request to return an existing RT ticket (which is hard
coded for testing purposes):*
    Private Const cnstBase_URL As String = "https://[our RT url]"

    With WinHttpReq
        'either of the following lines seems to work and return a cookie
        .Open "POST", cnstBase_URL

        .SetRequestHeader "User-Agent", "Mozilla/5.0 (Windows NT 6.1;
WOW64; rv:31.0) Gecko/20100101 Firefox/31.0"
        .SetRequestHeader "Connection", "keep-alive"

        'user name and password for 1st RT login page/url
    .SetCredentials cnstRequestor, cnstPWD,
HTTPREQUEST_SETCREDENTIALS_FOR_SERVER

        On Error Resume Next
        .Send

        If Err.Number = 0 Then
            If .Status = "200" Then
                On Error Resume Next
                output_Cookie = .getResponseHeader("Set-Cookie")
                On Error GoTo 0

                myCookie = Split(output_Cookie, ";")
                If UBound(myCookie) > 0 Then
                    'implicit conversion to string
                    mvarSessionCookie = myCookie(0)
                End If
            Else
                Debug.Print "HTTP " & .Status & " " & .StatusText
            End If
        Else
            Debug.Print "Error " & Err.Number & " " & Err.Source & " " &
Err.Description
        End If
        On Error GoTo 0

    End With

    Set WinHttpReq = Nothing

    If Trim(mvarSessionCookie) = "" Then Exit Function

    'perform second request
    Set WinHttpReq = New WinHttp.WinHttpRequest
    With WinHttpReq
        'get ticket data
        Dim TargetURL As String

        'to test cookie, display a ticket
        'hard coded for testing as this works from the Browser which I
thought would be a good test
        'to see if the Cookie variable works
        TargetURL = "https://[our RT url]/REST/1.0/ticket/96494/show"

        .Open "GET", TargetURL, False

        .SetRequestHeader "User-Agent", "Mozilla/5.0 (Windows NT 6.1;
WOW64; rv:31.0) Gecko/20100101 Firefox/31.0"
        .SetRequestHeader "Connection", "keep-alive"

        .SetRequestHeader "Cookie", mvarSessionCookie

        'user name and password for 2nd RT login page/url
    .SetCredentials cnstBasic_Auth_User, cnstBasic_Auth_PWD,
HTTPREQUEST_SETCREDENTIALS_FOR_SERVER

        On Error Resume Next
        .Send

        If Err.Number = 0 Then
            If .Status = "200" Then
                Debug.Print
                Debug.Print .ResponseText
                Debug.Print .GetAllResponseHeaders
            Else
                Debug.Print "HTTP " & .Status & " " & .StatusText
            End If
        Else
            Debug.Print "Error " & Err.Number & " " & Err.Source & " " &
Err.Description
        End If
        On Error GoTo 0

        Debug.Print .GetAllResponseHeaders

    End With

    Set WinHttpReq = Nothing


Thanks, in advance,
Tim
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20150501/687d395a/attachment.htm>