Sample code for 30+ languages & platforms
Java

Set the Shared JWE Unprotected Header

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetUnprotectedHeader, which sets the shared JWE unprotected header from a JsonObject.

Background. The unprotected header is shared by all recipients but, unlike the protected header, is not integrity-protected. It is carried in the JSON serialization forms of a JWE.

Chilkat Java Downloads

Chilkat2 Java
import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.JsonObject;
import com.chilkatsoft.chilkat2.Jwe;
import com.chilkatsoft.chilkat2.StringBuilder;

public class ChilkatExample {

    public static void main(String[] args) {
        Jwe jwe = new Jwe();

        // Protected header: AES key-wrap with AES-256-GCM content encryption.
        JsonObject header = new JsonObject();
        header.updateString("alg", "A256KW");
        header.updateString("enc", "A256GCM");
        try {
            jwe.setProtectedHeader(header);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key from a
        // secure source rather than hard-coding it.
        String base64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=";
        try {
            jwe.setWrappingKey(0, base64Key, "base64");
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // Set the shared JWE unprotected header.  It is shared by all recipients but, unlike the protected
        // header, is not integrity-protected.
        JsonObject unprotected = new JsonObject();
        unprotected.updateString("cty", "text/plain");
        try {
            jwe.setUnprotectedHeader(unprotected);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        StringBuilder sbContent = new StringBuilder();
        sbContent.append("This is the secret content.");
        StringBuilder sbJwe = new StringBuilder();
        try {
            jwe.encryptSb(sbContent, "utf-8", sbJwe);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        System.out.println(sbJwe.getAsString());
    }
}