Classic ASP

Sign a JWS with an HMAC Key

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetMacKey, which sets the symmetric MAC key for a signature. The key bytes are supplied in a named encoding such as hex or base64.

Background. HMAC-based JWS (for example HS256) authenticates the payload with a shared symmetric key that both signer and verifier possess.

Chilkat Classic ASP Downloads

Download Chilkat for Classic ASP

Classic ASP

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<%
success = 0

set jws = Server.CreateObject("Chilkat.Jws")

'  Protected header specifying HMAC-SHA256.
set header = Server.CreateObject("Chilkat.JsonObject")
success = header.UpdateString("alg","HS256")
success = jws.SetProtectedHeader(0,header)
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( jws.LastErrorText) & "</pre>"
    Response.End
End If

bIncludeBom = 0
success = jws.SetPayload("This is the content to sign.","utf-8",bIncludeBom)
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( jws.LastErrorText) & "</pre>"
    Response.End
End If

'  Set the symmetric MAC key for signature 0.  The key bytes are provided in the named encoding (here
'  base64).  In production, obtain the key from a secure source rather than hard-coding it.
base64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
success = jws.SetMacKey(0,base64Key,"base64")
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( jws.LastErrorText) & "</pre>"
    Response.End
End If

jwsCompact = jws.CreateJws()
If (jws.LastMethodSuccess = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( jws.LastErrorText) & "</pre>"
    Response.End
End If

Response.Write "<pre>" & Server.HTMLEncode( jwsCompact) & "</pre>"

%>
</body>
</html>