Dart

Create JWT using a Brainpool EC Key

See more JSON Web Token (JWT) Examples

Demonstrates how to create a JWT using an EC private key. This is for JOSE headers having an "alg" member with any of the following values:

• BP160R1
• BP192R1
• BP224R1
• BP256R1
• BP320R1
• BP384R1
• BP512R1

This example also demonstrates how to include time constraints:

• nbf: Not Before Time
• exp: Expiration Time
• iat: Issue At Time

Dart

import 'package:chilkat/chilkat.dart';

void main() {
  // Demonstrates how to create a JWT using a brainpool EC private key.

  // This example requires the Chilkat API to have been previously unlocked.
  // See Global Unlock Sample for sample code.

  final privKey = CkPrivateKey();

  // Load a brainpool EC key.
  try {
    privKey.loadPemFile('c:/qa_data/pem/ec_brainpool_privKey.pem');
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    return;
  }

  // You can examine the curve name of the key you just loaded by getting the private in XML format:
  // <ECCKeyValue curve="CURVE_NAME">...</ECCKeyValue>
  print(privKey.getXml());

  final jwt = CkJwt();

  // Build the JOSE header
  final jose = CkJsonObject();
  // Use the brainpool curve name matching the private key you just loaded.
  // Use "BP256R1", or "BP384R1", etc.   
  jose.appendString('alg', 'BP256R1');
  jose.appendString('typ', 'JWT');

  // Now build the JWT claims (also known as the payload)
  final claims = CkJsonObject();
  claims.appendString('iss', 'http://example.org');
  claims.appendString('sub', 'John');
  claims.appendString('aud', 'http://example.com');

  // Set the timestamp of when the JWT was created to now.
  final curDateTime = jwt.genNumericDate(0);
  claims.addIntAt(-1, 'iat', curDateTime);

  // Set the "not process before" timestamp to now.
  claims.addIntAt(-1, 'nbf', curDateTime);

  // Set the timestamp defining an expiration time (end time) for the token
  // to be now + 1 hour (3600 seconds)
  claims.addIntAt(-1, 'exp', curDateTime + 3600);

  // Produce the smallest possible JWT:
  jwt.autoCompact = true;

  // Create the JWT token.  This is where the ECC signature is created.
  final token = jwt.createJwtPk(jose.emit(), claims.emit(), privKey);

  print(token);
}