Decrypt a JWE into a StringBuilder

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.DecryptSb, which decrypts a recipient of a loaded JWE and writes the plaintext into a StringBuilder.

var
success: Boolean;
jwe: HCkJwe;
jweCompact: PWideChar;
base64Key: PWideChar;
sbContent: HCkStringBuilder;

begin
success := False;

jwe := CkJwe_Create();

//  Load the JWE compact serialization to be decrypted.
jweCompact := 'eyJhbGciOiJBMjU2S1ciLCJlbmMiOiJBMjU2R0NNIn0.<...>.<iv>.<ciphertext>.<tag>';
success := CkJwe_LoadJwe(jwe,jweCompact);
if (success = False) then
  begin
    Memo1.Lines.Add(CkJwe__lastErrorText(jwe));
    Exit;
  end;

//  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key
//  from a secure source rather than hard-coding it.
base64Key := 'YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=';
success := CkJwe_SetWrappingKey(jwe,0,base64Key,'base64');
if (success = False) then
  begin
    Memo1.Lines.Add(CkJwe__lastErrorText(jwe));
    Exit;
  end;

//  Decrypt recipient index 0, writing the plaintext into a StringBuilder.
sbContent := CkStringBuilder_Create();
success := CkJwe_DecryptSb(jwe,0,'utf-8',sbContent);
if (success = False) then
  begin
    Memo1.Lines.Add(CkJwe__lastErrorText(jwe));
    Exit;
  end;
Memo1.Lines.Add(CkStringBuilder__getAsString(sbContent));

CkJwe_Dispose(jwe);
CkStringBuilder_Dispose(sbContent);