B4X

bitzlato.com whoami

See more JSON Web Token (JWT) Examples

Demonstrates sending a request to the bitzlato.com whoami endpoint using an ES256 JWT token for authentication. B4X

Dim success As Boolean = False

'  This example requires the Chilkat API to have been previously unlocked.
'  See Global Unlock Sample for sample code.

'   Use the following ECC key loaded from JWK format.
Dim jwk As ChilkatJsonObject
jwk.Initialize
success = jwk.UpdateString("kty", "EC")
success = jwk.UpdateString("crv", "P-256")
success = jwk.UpdateString("x", "...")
success = jwk.UpdateString("y", "...")
success = jwk.UpdateString("d", "...")

Dim eccKey As ChilkatPrivateKey
eccKey.Initialize("eccKey")
success = eccKey.LoadJwk(jwk.Emit)
If success = False Then
    Log(eccKey.LastErrorText)
    Return
End If


Dim jwt As ChilkatJwt
jwt.Initialize

'  Build the JOSE header
Dim jose As ChilkatJsonObject
jose.Initialize
success = jose.AppendString("format", "compact")
success = jose.AppendString("alg", "ES256")

'  Now build the JWT claims (also known as the payload)

'  Our JWT claims will contain members as shown here:

'  	{
'  	  "email":"your_email@example.com",
'  	  "aud":"usr",
'  	  "iat":"1588286154",
'  	  "jti":"555D9123"
'  	}

Dim claims As ChilkatJsonObject
claims.Initialize
claims.AppendString("jti", "555D9123")
claims.AppendString("email", "your_email@example.com")

'  Set the timestamp of when the JWT was created to now minus 60 seconds
Dim curDateTime As Int = jwt.GenNumericDate(-60)
success = claims.AddIntAt(-1, "iat", curDateTime)

'  Set the "not process before" timestamp to now minus 60 seconds
success = claims.AddIntAt(-1, "nbf", curDateTime)

'  Set the timestamp defining an expiration time (end time) for the token
'  to be now + 1 hour (3600 seconds)
success = claims.AddIntAt(-1, "exp", curDateTime + 3600)

claims.AppendString("aud", "usr")

'  Produce the smallest possible JWT:
jwt.AutoCompact = True

'  Create the JWT token.  This is where the RSA signature is created.
Dim jwt_token As String = jwt.CreateJwtPk(jose.Emit, claims.Emit, eccKey)

Log(jwt_token)

'  Send the HTTPS GET with the jwt_token used for Authorization.
Dim http As ChilkatHttp
http.Initialize("http")
http.AuthToken = jwt_token
Dim responseStr As String = http.QuickGetStr("https://bitzlato.com/api/auth/whoami")
If http.LastMethodSuccess = False Then
    Log(http.LastErrorText)
    Return
End If


Log("status code = " & http.LastStatus)
Log(responseStr)