Detectify.java

package com.detectify;

import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.net.HttpURLConnection;
import java.net.URL;
import java.security.InvalidKeyException;
import java.security.NoSuchAlgorithmException;
import java.util.Base64;
import java.util.Date;
import java.util.HashMap;
import java.util.Map;

public class Detectify {
 /**
 * Detectify API endpoint, no trailing slash
 */
 private static final String Endpoint = "https://api.detectify.com/rest";

 private String apiKey;
 private String secretKey;

 Detectify(String apiKey, String secretKey) {
 this.apiKey = apiKey;
 this.secretKey = secretKey;
 }

 /**
 * Create the HTTP headers for API requests.
 *
 * @param method The HTTP method to use for the request, in uppercase
 * @param path The path of the request
 * @param timestamp The timestamp of the request
 * @param body The optional body of the request
 */
 private Map<String, String> MakeHeaders(String method, String path, Date timestamp, String body) {
 // Signature timestamp uses Unix epoch time
 Long epoch = timestamp.getTime() / 1000;

 // Format hash payload
 String message = String.format("%s;%s;%s;%s;%s", method, path, this.apiKey, epoch, body);

 // Decode base64 secret key to binary
 byte[] key = Base64.getDecoder().decode(this.secretKey);

 // Create the signature
 String signature = "";
 try {
 Mac hasher = Mac.getInstance("HmacSHA256");
 hasher.init(new SecretKeySpec(key, "HmacSHA256"));

 byte[] hash = hasher.doFinal(message.getBytes());

 // Encode signature back to base64
 signature = Base64.getEncoder().encodeToString(hash);
 } catch (NoSuchAlgorithmException e) {
 } catch (InvalidKeyException e) {
 }

 Map<String, String> headers = new HashMap<>();
 headers.put("X-Detectify-Key", this.apiKey);
 headers.put("X-Detectify-Signature", signature);
 headers.put("X-Detectify-Timestamp", epoch.toString());

 return headers;
 }

 public boolean StartScan(String scanProfile) {
 Date timestamp = new Date();

 // Format API request URL
 String path = String.format("/v2/scans/%s/", scanProfile);
 String method = "POST";

 URL url;
 try {
 url = new URL(String.format("%s%s", Detectify.Endpoint, path));
 } catch (IOException e) {
 }

 // Create Detectify signature HTTP headers
 Map<String, String> headers = MakeHeaders(method, path, timestamp, "");

 int statusCode;

 // Call the Detectify API
 try {
 HttpURLConnection conn = (HttpURLConnection) url.openConnection();
 conn.setRequestMethod(method);

 // Add HTTP headers to request
 for (Map.Entry<String, String> header : headers.entrySet()) {
 conn.setRequestProperty(header.getKey(), header.getValue());
 }

 // Get result of request
 statusCode = conn.getResponseCode();

 } catch (IOException e) {
 }

 switch (statusCode) {
 case 202:
 System.out.println("Scan start request accepted");
 return true;
 case 400:
 System.out.println("Invalid scan profile token");
 return false;
 case 401:
 System.out.println("Missing/invalid API key or message signature, or invalid timestamp");
 return false;
 case 403:
 System.out.println("The API key cannot access this functionality");
 return false;
 case 409:
 System.out.println("A scan is already running on the specified profile");
 return false;
 case 423:
 System.out.println("The domain is not verified");
 return false;
 case 500:
 System.out.println("An error occurred while processing the request");
 return false;
 case 503:
 System.out.println("An error occurred while processing the request");
 return false;
 default:
 System.out.println(String.format("Unhandled API response code: %d", statusCode));
 return false;
 }
 }

 public void ScanStatus(String scanProfile) {
 Date timestamp = new Date();

 // Format API request URL
 String path = String.format("/v2/scans/%s/", scanProfile);
 String method = "GET";

 URL url;
 try {
 url = new URL(String.format("%s%s", Detectify.Endpoint, path));
 } catch (IOException e) {
 }

 // Create Detectify signature HTTP headers
 Map<String, String> headers = MakeHeaders(method, path, timestamp, "");

 int statusCode;

 // Buffer for JSON response
 StringBuffer response = new StringBuffer();

 // Call the Detectify API
 try {
 HttpURLConnection conn = (HttpURLConnection) url.openConnection();
 conn.setRequestMethod(method);

 for (Map.Entry<String, String> header : headers.entrySet()) {
 conn.setRequestProperty(header.getKey(), header.getValue());
 }

 // Get result of request
 statusCode = conn.getResponseCode();

 // Read JSON response
 BufferedReader in = new BufferedReader(
 new InputStreamReader(conn.getInputStream()));
 String inputLine;

 while ((inputLine = in.readLine()) != null) {
 response.append(inputLine);
 }
 in.close();
 conn.disconnect();
 } catch (IOException e) {
 }

 switch (statusCode) {
 case 200:
 System.out.println(response);
 break;
 case 400:
 System.out.println("Invalid scan profile token");
 break;
 case 401:
 System.out.println("Missing/invalid API key or message signature, or invalid timestamp");
 break;
 case 403:
 System.out.println("The API key cannot access this functionality");
 break;
 case 404:
 System.out.println("No scan running for the specified profile, or the specified scan profile does not exist or the API key cannot access the scan profile");
 case 500:
 System.out.println("An error occurred while processing the request");
 break;
 case 503:
 System.out.println("An error occurred while processing the request");
 break;
 default:
 System.out.println(String.format("Unhandled API response code: %d", statusCode));
 }
 }

}