EUDR TRACES API: ERP-Integration erfolgreich umsetzen – Herausforderungen und Alternativen

import javax.xml.soap.*;
import javax.xml.namespace.QName;
import java.security.MessageDigest;
import java.security.SecureRandom;
import java.text.SimpleDateFormat;
import java.util.Base64;
import java.util.Calendar;
import java.util.Date;
import java.util.TimeZone;
import java.util.UUID;

public class TracesEudrClient {
    
    private static final String TRACES_BASE_URL = "https://acceptance.eudr.webcloud.ec.europa.eu";
    private static final String SUBMISSION_SERVICE_PATH = "/tracesnt/ws/EUDRSubmissionServiceV2";
    private static final String WEB_SERVICE_CLIENT_ID = "eudr-test"; // "eudr-repository" for production
		private static final int TIMESTAMP_VALIDITY_SECONDS = 60;
		private static final int TIMEOUT_MS = 10000;

		private final String username;
		private final String authenticationKey;
    
    public TracesEudrClient(String username, String authenticationKey) {
        this.username = username;
        this.authenticationKey = authenticationKey;
    }
    

    private String generatePasswordDigest(byte[] nonceBytes, String created) throws Exception {
        MessageDigest digest = MessageDigest.getInstance("SHA-1");
        digest.update(nonceBytes);
        digest.update(created.getBytes("UTF-8"));
        digest.update(authenticationKey.getBytes("UTF-8"));
        byte[] hash = digest.digest();
        return Base64.getEncoder().encodeToString(hash);
    }



    public SOAPMessage submitDDS(String operatorType, String statementXml) throws Exception {
        String soapEndpointUrl = TRACES_BASE_URL + ":443" + SUBMISSION_SERVICE_PATH;
        String soapAction = "http://ec.europa.eu/tracesnt/certificate/eudr/submission/v2/submitDds";
        
        // 1. Generate security tokens
        SecureRandom random = new SecureRandom();
        byte[] nonceBytes = new byte[16];
        random.nextBytes(nonceBytes);
        String nonceBase64 = Base64.getEncoder().encodeToString(nonceBytes);
        
        Date now = new Date();
        String created = formatISO8601(now);
        
        Calendar cal = Calendar.getInstance();
        cal.setTime(now);
        cal.add(Calendar.SECOND, TIMESTAMP_VALIDITY_SECONDS);
        String expires = formatISO8601(cal.getTime());
        
        String passwordDigest = generatePasswordDigest(nonceBytes, created);
        
        // Generate unique IDs for security elements
        String timestampId = "TS-" + UUID.randomUUID().toString();
        String usernameTokenId = "UsernameToken-" + UUID.randomUUID().toString();
        
        // 2. Create SOAP Connection
        SOAPConnectionFactory scf = SOAPConnectionFactory.newInstance();
        SOAPConnection connection = scf.createConnection();
        
        // 3. Construct the SOAP Message
        MessageFactory messageFactory = MessageFactory.newInstance();
        SOAPMessage soapMessage = messageFactory.createMessage();
        SOAPPart soapPart = soapMessage.getSOAPPart();
        SOAPEnvelope envelope = soapPart.getEnvelope();
        
        // Add namespaces
        envelope.addNamespaceDeclaration("v2", "http://ec.europa.eu/tracesnt/certificate/eudr/submission/v2");
        envelope.addNamespaceDeclaration("v21", "http://ec.europa.eu/tracesnt/certificate/eudr/model/v2");
        envelope.addNamespaceDeclaration("v4", "http://ec.europa.eu/sanco/tracesnt/base/v4");
        
        // 4. Build SOAP Header with WS-Security
        SOAPHeader header = envelope.getHeader();
        
        // Add Security element with mustUnderstand="1"
        SOAPElement security = header.addChildElement("Security", "wsse", 
            "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd");
        security.addNamespaceDeclaration("wsu", 
            "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd");
        security.addAttribute(envelope.createQName("mustUnderstand", "soapenv"), "1");
        
        // Add Timestamp
        SOAPElement timestamp = security.addChildElement("Timestamp", "wsu");
        timestamp.addAttribute(new QName(
            "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd", 
            "Id", "wsu"), timestampId);
        timestamp.addChildElement("Created", "wsu").addTextNode(created);
        timestamp.addChildElement("Expires", "wsu").addTextNode(expires);
        
        // Add UsernameToken
        SOAPElement usernameToken = security.addChildElement("UsernameToken", "wsse");
        usernameToken.addAttribute(new QName(
            "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd", 
            "Id", "wsu"), usernameTokenId);
        
        usernameToken.addChildElement("Username", "wsse").addTextNode(username);
        
        // Add Password with Type attribute
        SOAPElement password = usernameToken.addChildElement("Password", "wsse");
        password.addAttribute(new QName("Type"), 
            "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest");
        password.addTextNode(passwordDigest);
        
        // Add Nonce with EncodingType attribute
        SOAPElement nonce = usernameToken.addChildElement("Nonce", "wsse");
        nonce.addAttribute(new QName("EncodingType"), 
            "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary");
        nonce.addTextNode(nonceBase64);
        
        // Add Created timestamp to UsernameToken
        usernameToken.addChildElement("Created", "wsu").addTextNode(created);
        
        // Add WebServiceClientId header (CRITICAL - required by TRACES)
        SOAPElement clientId = header.addChildElement("WebServiceClientId", "v4");
        clientId.addTextNode(WEB_SERVICE_CLIENT_ID);
        
        // 5. Build SOAP Body
        SOAPBody body = envelope.getBody();
        SOAPElement submitRequest = body.addChildElement("SubmitStatementRequest", "v2");
        submitRequest.addChildElement("operatorType", "v2").addTextNode(operatorType); // OPERATOR, TRADER, etc.
        
        // Add statement element - you would insert your generated XML here
        SOAPElement statementElement = submitRequest.addChildElement("statement", "v2");
        // Note: You need to parse and insert the statementXml properly
        // This is a simplified example - in practice you'd need to parse the XML
        // and add it as child elements or use a DOM approach
        statementElement.addTextNode(statementXml);
        
        // Set SOAPAction header
        MimeHeaders mimeHeaders = soapMessage.getMimeHeaders();
        mimeHeaders.addHeader("SOAPAction", soapAction);
        
        soapMessage.saveChanges();
        
        // Optional: Print request for debugging
        System.out.println("=== SOAP Request ===");
        soapMessage.writeTo(System.out);
        System.out.println("\n");
        
        // 6. Send the SOAP request and get the response
        SOAPMessage response = connection.call(soapMessage, soapEndpointUrl);
        connection.close();
        
        // 7. Process the response
        System.out.println("=== SOAP Response ===");
        response.writeTo(System.out);
        System.out.println("\n");
        
        if (response.getSOAPBody().hasFault()) {
            SOAPFault fault = response.getSOAPBody().getFault();
            String faultCode = fault.getFaultCode();
            String faultString = fault.getFaultString();
            
            System.err.println("SOAP Fault - Code: " + faultCode + ", String: " + faultString);
            
            if ("env:Client".equals(faultCode) && "UnauthenticatedException".equals(faultString)) {
                throw new TracesApiException("UNAUTHENTICATED", "Authentication failed");
            }
            
            // Check for BusinessRulesValidationException in fault detail
            Detail detail = fault.getDetail();
            if (detail != null) {
                // Parse detail for BusinessRulesValidationException
                // This would require additional XML parsing logic
            }
            
            throw new TracesApiException("SOAP_FAULT", faultString);
        }
        
        return response;
    }
    
    /**
     * Custom exception class for TRACES API errors
     */
    public static class TracesApiException extends Exception {
        private final String code;
        
        public TracesApiException(String code, String message) {
            super(message);
            this.code = code;
        }
        
        public String getCode() {
            return code;
        }
    }
    
    /**
     * Example usage
     */
    public static void main(String[] args) {
        try {
            String username = System.getenv("TRACES_ACCEPTANCE_EUDR_USERNAME");
            String authKey = System.getenv("TRACES_ACCEPTANCE_AUTHENTICATION_KEY");
            
            if (username == null || authKey == null) {
                throw new IllegalArgumentException(
                    "TRACES_ACCEPTANCE_EUDR_USERNAME and TRACES_ACCEPTANCE_AUTHENTICATION_KEY must be set");
            }
            
            TracesEudrClient client = new TracesEudrClient(username, authKey);
            
            // You would generate this XML using a service similar to TracesStatementXMLService
            String statementXml = "IMPORT...";
            
            SOAPMessage response = client.submitDDS("OPERATOR", statementXml);
            
            System.out.println("✅ DDS submitted successfully");
            
        } catch (Exception e) {
            e.printStackTrace();
        }
    }
}

import java.io.IOException;
import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpClient.Version;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.time.Duration;


public class TansoEudrClient {

    private final String apiKey;
    private final HttpClient httpClient;

    public TansoEudrClient(String apiKey) {
        this(apiKey, HttpClient.newBuilder()
                .version(Version.HTTP_2)
                .connectTimeout(Duration.ofMillis(TIMEOUT_MS))
                .build());
    }

    public String createDds(String ddsJson) {

        String url = TANSO_EUDR_BASE_URL + EUDR_DDS_PATH;

        HttpRequest request = HttpRequest.newBuilder()
                .uri(URI.create("https://api.tanso.de/v2/eudr/dds"))
                .header("Content-Type", "application/json")
                .header("X-API-Key", apiKey)
                .POST(HttpRequest.BodyPublishers.ofString(ddsJson))
                .build();


        HttpResponse response = httpClient.send(request, HttpResponse.BodyHandlers.ofString());

        String body = response.body();

        return body;
    }


    public static void main(String[] args) {
        try {    
            TansoEudrClient client = new TansoEudrClient(System.getenv("TANSO_EUDR_API_KEY"));

            String ddsJson = """
                {
                  "operatorType": "OPERATOR",
                  "statement": {
                    "activityType": "IMPORT"
                    // ... rest of your DDS data ...
                  }
                }
                """;

            String responseBody = client.createDds(ddsJson);

            System.out.println("✅ DDS created successfully");
            System.out.println("Response from Tanso EUDR API:");
            System.out.println(responseBody);

        } catch (Exception e) {
            e.printStackTrace();
        }
    }
}