Decrypt a JWE into BinData

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.DecryptBd, which decrypts a recipient of a loaded JWE and writes the plaintext bytes into a BinData.

var
success: Boolean;
jwe: HCkJwe;
jweCompact: PWideChar;
base64Key: PWideChar;
bd: HCkBinData;

begin
success := False;

jwe := CkJwe_Create();

//  Load the JWE compact serialization to be decrypted.
jweCompact := 'eyJhbGciOiJBMjU2S1ciLCJlbmMiOiJBMjU2R0NNIn0.<...>.<iv>.<ciphertext>.<tag>';
success := CkJwe_LoadJwe(jwe,jweCompact);
if (success = False) then
  begin
    Memo1.Lines.Add(CkJwe__lastErrorText(jwe));
    Exit;
  end;

//  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key
//  from a secure source rather than hard-coding it.
base64Key := 'YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=';
success := CkJwe_SetWrappingKey(jwe,0,base64Key,'base64');
if (success = False) then
  begin
    Memo1.Lines.Add(CkJwe__lastErrorText(jwe));
    Exit;
  end;

//  Decrypt recipient index 0, writing the plaintext bytes into a BinData.
bd := CkBinData_Create();
success := CkJwe_DecryptBd(jwe,0,bd);
if (success = False) then
  begin
    Memo1.Lines.Add(CkJwe__lastErrorText(jwe));
    Exit;
  end;
Memo1.Lines.Add('Decrypted ' + IntToStr(CkBinData_getNumBytes(bd)) + ' bytes.');

CkJwe_Dispose(jwe);
CkBinData_Dispose(bd);