Classic ASP

Set the Optional JWS Unprotected Header

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetUnprotectedHeader, which sets the optional unprotected header for a signature.

Background. Unlike the protected header, the unprotected header is not covered by the signature. It is carried in the JSON serialization forms of a JWS, so producing a JWS with an unprotected header yields a JSON serialization rather than compact form.

Chilkat Classic ASP Downloads

Download Chilkat for Classic ASP

Classic ASP

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<%
success = 0

set jws = Server.CreateObject("Chilkat.Jws")

'  Protected header specifying HMAC-SHA256.
set header = Server.CreateObject("Chilkat.JsonObject")
success = header.UpdateString("alg","HS256")
success = jws.SetProtectedHeader(0,header)
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( jws.LastErrorText) & "</pre>"
    Response.End
End If

'  Set the optional unprotected header for signature 0.  Unlike the protected header, it is not
'  covered by the signature.  It is carried in the JSON serialization forms of a JWS.
set unprotected = Server.CreateObject("Chilkat.JsonObject")
success = unprotected.UpdateString("kid","signer-key-1")
success = jws.SetUnprotectedHeader(0,unprotected)
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( jws.LastErrorText) & "</pre>"
    Response.End
End If

bIncludeBom = 0
success = jws.SetPayload("This is the content to sign.","utf-8",bIncludeBom)
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( jws.LastErrorText) & "</pre>"
    Response.End
End If

base64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
success = jws.SetMacKey(0,base64Key,"base64")
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( jws.LastErrorText) & "</pre>"
    Response.End
End If

'  Because an unprotected header is present, the JWS is produced in a JSON serialization form.
jwsJson = jws.CreateJws()
If (jws.LastMethodSuccess = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( jws.LastErrorText) & "</pre>"
    Response.End
End If

Response.Write "<pre>" & Server.HTMLEncode( jwsJson) & "</pre>"

%>
</body>
</html>