function userEventBeforeLoad(type, form, request){
	domains = ['www.bitpay.com']; //an array of domains that is possible to use these credentials
	var script = 'customscript_bitpay_credential_sched'; //the script that will eventually use the nlapiRequestURLWithCredentials call
	var cred_group    = form.addFieldGroup("_credgroup", "Credential Fields Generated in Code");
        var cred_1        = form.addCredentialField('custpage_cred_1', 'String 1', domains, script, null, false, "_credgroup");
        var cred_2        = form.addCredentialField('custpage_cred_2', 'String 2', domains, script, null, false, "_credgroup");
}

1. domains: This is an array list of domains that can be called when trying to access your application outside of NetSuite.  The exact domains are required.
2. script: this is the name of the single script that will be used with the nlapiRequestURLWithCredentials call to the remote system.  Note, as of 2014.1, the documentation says that this parameter is optional but it is not correct; if you do not supply it, you won’t be able to decrypt the data.

function clientSave(){
	nlapiSetFieldValue('custrecord_credential_string_1', nlapiGetFieldValue('custpage_cred_1'));
	nlapiSetFieldValue('custrecord_credential_string_2', nlapiGetFieldValue('custpage_cred_2'));
	return true;
}

Using nlapiRequestURLWithCredentials Function

function callSecureURL(type) {
	//www.bitpay.com domain was previously referenced
	var url = 'https://www.bitpay.com/payments'; 

	//get the data from our custom record; its encrypted
	var r = nlapiLoadRecord('customrecord_credentials', 1);
	var cred_1 = r.getFieldValue('custrecord_credential_string_1');
	var cred_2 = r.getFieldValue('custrecord_credential_string_2');

	//store the encrypted credentials into an array
	var credentials = [cred_1, cred_2];

	//craft the the header
	var headers = {};
        headers['Content-Type'] = 'application/json';
        headers['Accept'] = 'application/json';
        headers['cred_1'] = '{' + cred_1 + '}';  //most important is to craft the value to be a JavaScript object {<data>}
        headers['cred_2'] = '{' + cred_2 + '}';

	//here is a sample where we use an https get to pass credentials
	//url = url + '&cred_1={' + cred_1 + '}&cred_2={' + cred_2 + '}';
	var response = nlapiRequestURLWithCredentials(credentials, url, null, headers, null); //send data
};

The challenge with this function call is you can’t see the work it is doing because it goes out over the wire and decrypts at the same time.  There is no traditional debugging available.

We have written an HTTPS inspection utility to help you understand how this works by catching the information being passed over the SSL URL.  See the “Diagnose and Inspect NetSuite HTTPS Posts” article to learn more.  In that article, we reference a SuiteBundle that you can install — that bundle also includes scripts and custom records that we referenced in this article to help you learn how to use the entire secure practice.

Enhance Your NetSuite System

If you are looking for experts in the NetSuite platform, contact us.