Set the Optional JWS Unprotected Header

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetUnprotectedHeader, which sets the optional unprotected header for a signature.

Background. Unlike the protected header, the unprotected header is not covered by the signature. It is carried in the JSON serialization forms of a JWS, so producing a JWS with an unprotected header yields a JSON serialization rather than compact form.

Chilkat Go Downloads

Download Chilkat for Go

    success := false

    jws := chilkat.NewJws()

    //  Protected header specifying HMAC-SHA256.
    header := chilkat.NewJsonObject()
    header.UpdateString("alg","HS256")
    success = jws.SetProtectedHeader(0,header)
    if success == false {
        fmt.Println(jws.LastErrorText())
        jws.DisposeJws()
        header.DisposeJsonObject()
        return
    }

    //  Set the optional unprotected header for signature 0.  Unlike the protected header, it is not
    //  covered by the signature.  It is carried in the JSON serialization forms of a JWS.
    unprotected := chilkat.NewJsonObject()
    unprotected.UpdateString("kid","signer-key-1")
    success = jws.SetUnprotectedHeader(0,unprotected)
    if success == false {
        fmt.Println(jws.LastErrorText())
        jws.DisposeJws()
        header.DisposeJsonObject()
        unprotected.DisposeJsonObject()
        return
    }

    bIncludeBom := false
    success = jws.SetPayload("This is the content to sign.","utf-8",bIncludeBom)
    if success == false {
        fmt.Println(jws.LastErrorText())
        jws.DisposeJws()
        header.DisposeJsonObject()
        unprotected.DisposeJsonObject()
        return
    }

    base64Key := "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
    success = jws.SetMacKey(0,base64Key,"base64")
    if success == false {
        fmt.Println(jws.LastErrorText())
        jws.DisposeJws()
        header.DisposeJsonObject()
        unprotected.DisposeJsonObject()
        return
    }

    //  Because an unprotected header is present, the JWS is produced in a JSON serialization form.
    jwsJson := jws.CreateJws()
    if jws.LastMethodSuccess() == false {
        fmt.Println(jws.LastErrorText())
        jws.DisposeJws()
        header.DisposeJsonObject()
        unprotected.DisposeJsonObject()
        return
    }

    fmt.Println(*jwsJson)

    jws.DisposeJws()
    header.DisposeJsonObject()
    unprotected.DisposeJsonObject()