Sample code for 30+ languages & platforms
Dart

Set the Optional JWS Unprotected Header

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetUnprotectedHeader, which sets the optional unprotected header for a signature.

Background. Unlike the protected header, the unprotected header is not covered by the signature. It is carried in the JSON serialization forms of a JWS, so producing a JWS with an unprotected header yields a JSON serialization rather than compact form.

Chilkat Dart Downloads

Dart
import 'package:chilkat/chilkat.dart';

void main() {
  final jws = CkJws();

  // Protected header specifying HMAC-SHA256.
  final header = CkJsonObject();
  header.updateString('alg', 'HS256');
  try {
    jws.setProtectedHeader(0, header);
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    return;
  }

  // Set the optional unprotected header for signature 0.  Unlike the protected header, it is not
  // covered by the signature.  It is carried in the JSON serialization forms of a JWS.
  final unprotected = CkJsonObject();
  unprotected.updateString('kid', 'signer-key-1');
  try {
    jws.setUnprotectedHeader(0, unprotected);
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    return;
  }

  final bIncludeBom = false;
  try {
    jws.setPayload('This is the content to sign.', 'utf-8', bIncludeBom);
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    return;
  }

  final base64Key = 'YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=';
  try {
    jws.setMacKey(0, base64Key, 'base64');
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    return;
  }

  // Because an unprotected header is present, the JWS is produced in a JSON serialization form.
  final String jwsJson;
  try {
    jwsJson = jws.createJws();
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    return;
  }

  print(jwsJson);
}