java - 如何进行身份验证以访问我们自己的数据？

Question

我正在尝试使用 IDS 从基于 java 的 Web 应用程序访问 QBO 中我们自己的数据。我找到了一些示例(例如 ipp-java-devkit 中的示例)，并组装了大约 20 行代码来连接和身份验证......但我还没有任何工作。这些文档似乎面向构建一个第三方应用程序以出售给其他公司，以便他们可以从该应用程序访问自己的数据。我理解在这种情况下需要额外的安全性，但我肯定不需要在 Intuit 应用商店中创建一个应用程序只是为了访问我们自己的数据？

有人知道如何执行此操作的示例或教程吗？

Answer 1

根据 Intuit 的 FAQ ，Intuit Anywhere/IDS 只能用于 SaaS 应用程序(例如，您尝试向其他人销售的应用程序，该应用程序允许他们将 QuickBooks 文件连接到您的应用程序)。

来自常见问题解答:

Q: What are the requirements for implementing Intuit Anywhere?

A: Your app must:

• Be a web app available for use within a browser, that is sold as service (SaaS, including transactional pricing based) offering that you sell to multiple customers. Mobile extensions to your SaaS app are supported.

• Pass the Security Review prior to going live with customers.

并且:

Q: I want to integrate my custom (non-SaaS, single-tenant) solution with Intuit Anywhere. > Can I do this?

A: Not today, but we are considering it.

由于您尝试构建的内容不属于该模式，因此您没有资格使用 IDS。

您应该使用 qbXML。

在我们的QuickBooks integration wiki上我们有一些使用 Java 连接到 QuickBooks Online 的示例。

你应该register in DESKTOP mode与 Intuit，然后您可以使用这样的代码来交换数据:

import java.net.*;
import java.io.*;
import javax.net.ssl.*;

// WARNING SUPER SLOPPY DEMO CODE - YOU SHOULD CLEAN THIS UP AND MAKE THIS PRETTY IF YOU USE IT!

public class Test {

    protected static String _appID = "134476472";

    protected static String _appLogin = "test.www.yourdomain.com";

    protected static String _connTicket = "TGT-47-1sRm2nXMVfm$n8hb2MZfVQ";

    protected static String _appURL = "https://webapps.quickbooks.com/j/AppGateway";

    /**
     * @param args
     */
    public static void main(String[] args) {

        // First, we need to sign on to QBOE
        String xml = "<?xml version=\"1.0\" ?>" + 
        "<?qbxml version=\"6.0\"?>" + 
        "<QBXML>" + 
        "   <SignonMsgsRq>" + 
        "       <SignonDesktopRq>" + 
        "           <ClientDateTime>2007-01-02T01:02:35</ClientDateTime>" + 
        "           <ApplicationLogin>" + Test._appLogin + "</ApplicationLogin>" + 
        "           <ConnectionTicket>" + Test._connTicket + "</ConnectionTicket>" + 
        "           <Language>English</Language>" + 
        "           <AppID>" + Test._appID + "</AppID>" + 
        "           <AppVer>1</AppVer>" + 
        "       </SignonDesktopRq>" + 
        "   </SignonMsgsRq>" + 
        "</QBXML>";

        String out = "";
        try {
            out = Test._doRequest(xml);
            System.out.println(out);
        }
        catch (Exception ex) {
            System.out.println("Something bad happened: " + ex.getMessage());
        }

        // Parse out the connection ticket
        String sessTicket = out.substring(291, 330);
        System.out.println("Session ticket: " + sessTicket);

        // Send an actual request
        String xml2 = "<?xml version=\"1.0\" ?>" +  
"<?qbxml version=\"6.0\"?>" +  
"<QBXML> " + 
"   <SignonMsgsRq>" + 
"       <SignonTicketRq>" +  
"           <ClientDateTime>2006-09-20T15:49:26</ClientDateTime>" +  
"           <SessionTicket>" + sessTicket + "</SessionTicket>" + 
"           <Language>English</Language> " + 
"           <AppID>" + Test._appID + "</AppID>" + 
"           <AppVer>1</AppVer>" +  
"       </SignonTicketRq>" +  
"   </SignonMsgsRq>" +  
"   <QBXMLMsgsRq onError=\"continueOnError\">" +  
"       <CustomerQueryRq requestID=\"2\" />" +  
"   </QBXMLMsgsRq>" +  
"</QBXML>";

        try {
            System.out.println(Test._doRequest(xml2));      
        }
        catch (Exception ex) {
            System.out.println("Something bad happened: " + ex.getMessage());
        }
    }

    protected static String _doRequest(String xml) throws Exception {
        String xmlOut = null;

               try 
               {
                  URL url= new URL(Test._appURL);
                  HttpsURLConnection connection = (HttpsURLConnection)url.openConnection();
                  connection.setDoOutput(true);
                  connection.setDoInput(true);

                  connection.setRequestProperty("Content-Type", "application/x-qbxml");

                  PrintWriter out = new PrintWriter(connection.getOutputStream());
                  out.println(xml); //XML Input
                  out.close();
                  BufferedReader in = new BufferedReader(new InputStreamReader(connection.getInputStream()));
                  String inputLine = "";
                  xmlOut = "";
                  StringBuffer strOut = new StringBuffer();

                  while ((inputLine = in.readLine()) != null)
                  {
                      strOut.append(inputLine);
                  }
                  xmlOut = strOut.toString();

                  in.close();
               }
               catch(ConnectException conEx)
               {
                  System.out.println("Connection is unavailable. (ConnectException in SecureEnterpriseSocketSession class) " + conEx);
                  throw new Exception(conEx.getMessage());
               }
               catch(MalformedURLException malformedURLEx)
               {
                  System.out.println("Invalid URL. Cannot Connect. (MalformedURLException in SecureEnterpriseSocketSession class) " + malformedURLEx);
                  throw new Exception(malformedURLEx.getMessage());
               }
               catch(IOException ioEx)
               {
                  System.out.println("Invalid URL. Cannot Connect. (IOException in SecureEnterpriseSocketSession class) " + ioEx);
                  throw new Exception(ioEx.getMessage());
               }
               return xmlOut;
    }
}