PHP - How To Get Response From Web Service Call

Hi all,

I'm a newbie in PHP trying to move away from the .net platform. I seem to have run into my first challenge passing a complex type back to my web service. The web service is a live test site to test against. I've tested the service on .net and it works fine...but I think I'm missing something as I try porting over to PHP?

I've written some short code to keep it simple:

<?php
$SearchCriteria = array("ObjectType"=>1);

$parameters['user'] = "johndoe1";
$parameters['password'] = "snowball";
$parameters['SearchCriteria'] = $SearchCriteria ;

$client = new SoapClient("https://servicestest.mcquaig.com/mws.asmx?WSDL");
$result = $client->__soapCall('Find', $parameters);
?>

....against this portion of XML:

 <s:element name="Find">
        <s:complexType>
          <s:sequence>
            <s:element minOccurs="0" maxOccurs="1" name="user" type="s:string"/>
            <s:element minOccurs="0" maxOccurs="1" name="password" type="s:string"/>
            <s:element minOccurs="0" maxOccurs="1" name="criteria" type="tns:SearchCriteria"/>
          </s:sequence>
        </s:complexType>
      </s:element>
      <s:complexType name="SearchCriteria">
        <s:sequence>
          <s:element minOccurs="0" maxOccurs="1" name="AccountName" type="s:string"/>
          <s:element minOccurs="1" maxOccurs="1" name="ApplySharing" type="s:boolean"/>
          <s:element minOccurs="1" maxOccurs="1" name="CGType" type="s:int"/>
          <s:element minOccurs="0" maxOccurs="1" name="ClientRefID" type="s:string"/>
          <s:element minOccurs="1" maxOccurs="1" name="Composites" type="s:int"/>
          <s:element minOccurs="0" maxOccurs="1" name="ConfNo" type="s:string"/>
          <s:element minOccurs="0" maxOccurs="1" name="Email" type="s:string"/>
          <s:element minOccurs="1" maxOccurs="1" name="Expired" type="s:int"/>
          <s:element minOccurs="1" maxOccurs="1" name="ExpiryTSA" type="s:dateTime"/>
          <s:element minOccurs="1" maxOccurs="1" name="ExpiryTSZ" type="s:dateTime"/>
          <s:element minOccurs="0" maxOccurs="1" name="FirstName" type="s:string"/>
          <s:element minOccurs="1" maxOccurs="1" name="FormLangID" type="s:unsignedLong"/>
          <s:element minOccurs="1" maxOccurs="1" name="FunctionalArea" type="s:int"/>
          <s:element minOccurs="1" maxOccurs="1" name="Gender" type="s:int"/>
          <s:element minOccurs="1" maxOccurs="1" name="Industry" type="s:int"/>
          <s:element minOccurs="0" maxOccurs="1" name="JobTitle" type="s:string"/>
          <s:element minOccurs="0" maxOccurs="1" name="LastName" type="s:string"/>
          <s:element minOccurs="1" maxOccurs="1" name="LastUsedTSA" type="s:dateTime"/>
          <s:element minOccurs="1" maxOccurs="1" name="LastUsedTSZ" type="s:dateTime"/>
          <s:element minOccurs="1" maxOccurs="1" name="NoRelated" type="s:boolean"/>
          <s:element minOccurs="1" maxOccurs="1" name="ObjectType" type="s:int"/>
          <s:element minOccurs="1" maxOccurs="1" name="OrgID" type="s:unsignedLong"/>
          <s:element minOccurs="1" maxOccurs="1" name="Position" type="s:int"/>
          <s:element minOccurs="1" maxOccurs="1" name="ProfileType" type="s:int"/>
          <s:element minOccurs="1" maxOccurs="1" name="Recursive" type="s:boolean"/>
          <s:element minOccurs="1" maxOccurs="1" name="Status" type="s:int"/>
          <s:element minOccurs="1" maxOccurs="1" name="Type" type="s:int"/>
          <s:element minOccurs="1" maxOccurs="1" name="UnitsRemain" type="s:int"/>
          <s:element minOccurs="1" maxOccurs="1" name="UnitsRemainGT" type="s:boolean"/>
        </s:sequence>
      </s:complexType>



Nothing I seem to do works. I end up with the same error:

Uncaught SoapFault exception: [soap:Server] Server was unable to process request. ---> Value does not fall within the expected range.

Using NuSoap as:

<?php
require_once('lib/nusoap.php');

$SearchCriteria = array("ObjectType"=>1);

$wsdlURL = "https://servicestest.mcquaig.com/mws.asmx?WSDL";
$soap = new nusoap_client($wsdlURL);

$parameters['user'] = "johndoe1";
$parameters['password'] = "snowball";
$parameters['criteria'] = $SearchCriteria ;


$result = $soap->call("Find", $parameters);
if($error = $soap->getError()){ die($error);}
?>

I get this error:

soap:Client: Server did not recognize the value of HTTP Header SOAPAction: .




I'm stumped and sure it's something small, but I just don't see what I'm missing??  Any suggestions are greatly appreciated!!

Gary

This topic has been moved to Miscellaneous.

http://www.phpfreaks.com/forums/index.php?topic=353390.0

Okay,

On my original problem, I have been able to authenticate with the web service login service, and extract a cookie as follows from the web-service:

$s_Cookie = $agLoginService->agGetCookie();
$s_Cookie = AGSESSION=oxhbjcKtPw5sOymAD8m8KcKR6JL4i+TIE5mZxwOrXLwCRr8iTOvPxA==;

Now, I create data access soapclient:

$agDataService = new SoapClient($s_DataURL, $a_SoapOptions);   //yes I know I should build my own class wrapper around soapClient, but I am trying to make sure I know what to build before I do

next in the process I need to set the cookie for the data access service.

I tried using:
<b>$agDataService->__setCookie('cookie', $s_Cookie);</b>

but I don't think it's right because when I call any of the service's functions, I get no data back.

This is what their engineer had to say ( he is no help in php at all)

This is a question referring the http headers.  He needs to set the cookies as given in the examples on the wiki page.  The cookie is specified in a response http header as: Set-Cookie.  So the http headers he got back are correct.  The cookie he has to set is AGSESSION=oxhbjcKtPw5sOymAD8m8KcKR6JL4i+TIE5mZxwOrXLwCRr8iTOvPxA==;  There should be an api for setting the cookie if not there is one for setting the http header.  Set the http header name for the request (cookie - notice that is different than what you get back from an http response - read the rfc spec for http for all of the details) then set the value.  The semi colon at the end is the delimiter for http headers (in the rfc).  That is all he needs to do if he gets back some login error that means the cookies did not get set correctly.

Any ideas or help will be great. Thank you.

A HTTP request is made to the server, Slim creates a Request and Response object, content in the Request is sent to another server using cURL via Guzzle, Guzzle returns its own Response,  and content from Guzzle's response must be returned by the original Slim response.

Would you recommend white-listing or black-listing response headers, and which specific headers?

Similarly, would you recommend white-listing or black-listing the request headers sent via cURL, and which specific headers?

Thanks

<?php
use Psr\Http\Message\ResponseInterface as Response;
use GuzzleHttp\Psr7\Response as CurlResponse;

class ApiResponder
{
    public function delete(Response $httpResponse, CurlResponse $curlResponse) {
        return $this->proxy($httpResponse, $curlResponse);
    }
    //other public methods...

    private function proxy(Response $httpResponse, CurlResponse $curlResponse) {
        foreach($this->getResponseHeaders($curlResponse) as $name=>$value) {
            $httpResponse=$httpResponse->withHeader($name, $value);
        }
        return $httpResponse->withBody($curlResponse->getBody())->withStatus($curlResponse->getStatusCode());
    }

    private function getResponseHeaders(Response $httpResponse):array
    {
        //Blacklist headers which should be returned to original client.  TBD whether I should whitelist headers instead.
        $blacklist=['Date'=>null, 'Server'=>null, 'X-Powered-By'=>null, 'Access-Control-Allow-Origin'=>null, 'Access-Control-Allow-Methods'=>null, 'Access-Control-Allow-Headers'=>null, 'Set-Cookie'=>null];
        return array_diff_key($curlResponse->getHeaders(), $blacklist);
    }

    /**
    * This method doesn't really exist in this class, but is just included to show which headers I am forwarding in the cURL request.
    */
    private function getRequestHeaders($clientRequest):array
    {
        $whitelist=['connection'=>null,'accept'=>null,'accept-encoding'=>null,'accept-language'=>null,'content-type'=>null,'content-length'=>null];
        return array_intersect_key($clientRequest->getHeaders(), $whitelist);
    }
}

 

OVERVIEW:

The code is about making call to the escreen web service using SOAP and Curl with client authentication required. Currently I am not getting any result only HTTP 403 and 500 errors.
The call requires client authenticate cert to be on the callng site.

CODE:

    $content = "<TicketRequest>
      <Version>1.0</Version>
      <Mode>Test</Mode>
      <CommitAction></CommitAction>
      <PartnerInfo>
      <UserName>xxxxxxxxxx</UserName>
      <Password>xxxxxxxxxxx</Password>
      </ PartnerInfo>
      <RequestorOrderID></RequestorOrderID>
      <CustomerIdentification>
        <IPAddress></IPAddress>
        <ClientAccount>xxxxxxxxxx</ClientAccount>
        <ClientSubAccount>xxxxxxxxxx</ClientSubAccount>
        <InternalAccount></InternalAccount>
        <ElectronicClientID></ElectronicClientID>
      </CustomerIdentification>
      <TicketAction>
        <Type></Type>
        <Params>
          <Param>
          <ID>4646</ID>
          <Value></Value>
          </Param>
        </Params>
      </TicketAction>
    </TicketRequest>";
    
    $wsdl  = "https://services.escreen.com/SingleSignOnStage/SingleSignOn.asmx";
    
    $headers = array(  "Content-type: text/xml;charset=\"utf-8\"", 
         "Accept: text/xml", 
         "Cache-Control: no-cache", 
         "Pragma: no-cache", 
      //   "SOAPAction: \"\"", 
         "Content-length: ".strlen($content),
        ); 
     
    
    $ch = curl_init(); 
    curl_setopt($ch, CURLOPT_URL, $wsdl); 
    curl_setopt($ch, CURLOPT_HEADER, 1); 
    curl_setopt($ch, CURLOPT_VERBOSE, '1');
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); 
    curl_setopt($ch, CURLOPT_POSTFIELDS, $content); 
    
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, '1');
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, '1');
    //curl_setopt($ch, CURLOPT_HTTPHEADER, array("Content-Type: text/xml"));
    curl_setopt($ch, CURLOPT_HTTPHEADER, $headers); 
    //curl_setopt($ch, CURLOPT_HTTPHEADER, array('SOAPAction: ""')); 
    curl_setopt($ch, CURLOPT_CAPATH, '/home/pps/');
    curl_setopt($ch, CURLOPT_CAINFO,  '/home/pps/authority.pem');
    curl_setopt($ch, CURLOPT_SSLCERT, 'PROTPLUSSOL_SSO.pem');
    curl_setopt($ch, CURLOPT_SSLCERTPASSWD, 'xxxxxxxxxxxx');
    
    $output = curl_exec($ch);
    
    // Check if any error occured
    if(curl_errno($ch))
    {
        echo 'Error no : '.curl_errno($ch).' Curl error: ' . curl_error($ch);
    }
    
    print_r($output);



QUESTIONS:

1. I need to call the RequestTicket method and pass the XML string to it.
   I don't know how to do it here(pass the method name to call).

2. For client authentication they gave us three certs, one root cert, one intermediate
   cert and a client authentication cert PROTPLUSSOL_SSOpem(it was a .pfx file). Since we are on linux we converted them to pem . In curl calls I could not find way to how to include both the root cert and the intermediate cert ,so I combined them by making a new pem file and copying the intermediate cert and them the root cert and naming it authority.pem .
I am not sure whether it works or not and would like your opinion.

3. For the current code Iam getting the error
   Error no : 77 Curl error: error setting certificate verify locations: CAfile: /home/pps/authority.pem CApath: /home/pps/

 
  If I disable the curl error message,I am getting blank page with page title 403 - Forbidden. Access is denied.

  If I comment out the CURLOPT_CAPATH and CURLOPT_CAINFO lines it gives http 500 error page with the message as content and the following at the top.

 > HTTP/1.1 500 Internal Server Error. Cache-Control: private Content-Type: text/html Server: Microsoft-IIS/7.5 X-AspNet-Version: 1.1.4322 X-Powered-By: ASP.NET Date: Thu, 02 Sep 2010 14:46:38 GMT Content-Length: 1208

If I comment out as above and also CURLOPT_SSLCERT and CURLOPT_SSLCERTPASSWD it gives 403 error with the message as content.

So I would request you to help me out by pointing out whats wrong with the current code.

Thank you.