• 0

Using REST API from ServiceNow Scripting

Go to solution Solved by Mosh,


I would like to use the REST API from ServiceNow but I'm not able to generate the HMAC using the ServiceNow Glide System native class GlideCertificateEncryption(), the resulting values don't match with what I would expect from Python or PowerShell.  Are there any ServiceNow developers out there who have managed to call the LogicMonitor REST API from a ServiceNow script? If you have, could anyone share an example script please.

var JavaString = Packages.java.lang.String;

var key = new JavaString("key"); 
var message = new JavaString("message"); 

var keyUTF8 = new JavaString(key.getBytes("UTF8"));
var messageUTF8 = new JavaString(message.getBytes("UTF8"));

var util = new GlideStringUtil();
var encryption = new GlideCertificateEncryption();

//var mac = encryption.generateMac(util.base64Encode(keyUTF8), "HMACSHA256", messageUTF8);    
var mac = encryption.generateMac(HexUtil.convertToBase64(keyUTF8 + ""), "HMACSHA256", messageUTF8 + "");    


var decoded = util.base64Decode(mac);
var utf8Bytes = decoded.getBytes("UTF8");


Link to post
Share on other sites

6 answers to this question

Recommended Posts

  • 0

When I lasted looked at it SN didn't have the built in hash function to implement the auth needed for LM. If you install the "LogicMonitor Incident Management Integration" add-on from the ServiceNow store, It provides some supporting script includes functions you may be able to use.

Edited by Mike Moniz
  • Upvote 1
Link to post
Share on other sites
  • 1
  • Solution
Posted (edited)

Solved it. For anyone who needs it here is how to generate the MAC part of the signature using only native ServiceNow script and classes.  (I had to write my own convertByteArrayToHex() utility as there was nothing I could find native in ServiceNow.)  The problem with using CryptoJS is that in ServiceNow it would only be allowed in a scoped app and I wanted to do this in the global scope.

var HexUtil = 
  convertByteArrayToHex : function(byteArray)
    var hex = "";
    byteArray.forEach(function(byteValue) { hex += HexUtil.convertByteToHex(byteValue); });
    return hex;  
  convertByteToHex : function(b) 
    var hexChar = ["0""1""2""3""4""5""6""7","8""9""a""b""c""d""e""f"];
    return hexChar[(b >> 4& 0x0f+ hexChar[b & 0x0f];
var key = "key";
key = encodeURIComponent(key);
key = GlideStringUtil.base64Encode(key);
var msg = "message";
msg = encodeURIComponent(msg);
var mac = new GlideCertificateEncryption();
signature = mac.generateMac(key, "HmacSHA256", msg);
// Yes! bp7ym3X//Ft6uuUn1Y/a2y/kLnIZARl2kXNDBl9Y7Uo=
var bytes = GlideStringUtil.base64DecodeAsBytes(signature);
var hex = HexUtil.convertByteArrayToHex(bytes);
// Yes! 6e9ef29b75fffc5b7abae527d58fdadb2fe42e7219011976917343065f58ed4a
var hexB64 = GlideStringUtil.base64Encode(hex);
Edited by Mosh
  • Like 1
Link to post
Share on other sites
  • 0
On 9/16/2020 at 7:13 AM, sirisha said:
var hex = HexUtil.convertByteArrayToHex(bytes);
hex is coming as empty please help

Hi @sirisha,

Can you paste more of your code?  Need to see what you are doing before you call this function.

Edited by Mosh
Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.