Set the Optional JWS Unprotected Header

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetUnprotectedHeader, which sets the optional unprotected header for a signature.

import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.JsonObject;
import com.chilkatsoft.chilkat2.Jws;

public class ChilkatExample {

    public static void main(String[] args) {
        Jws jws = new Jws();

        // Protected header specifying HMAC-SHA256.
        JsonObject header = new JsonObject();
        header.updateString("alg", "HS256");
        try {
            jws.setProtectedHeader(0, header);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // Set the optional unprotected header for signature 0.  Unlike the protected header, it is not
        // covered by the signature.  It is carried in the JSON serialization forms of a JWS.
        JsonObject unprotected = new JsonObject();
        unprotected.updateString("kid", "signer-key-1");
        try {
            jws.setUnprotectedHeader(0, unprotected);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        boolean bIncludeBom = false;
        try {
            jws.setPayload("This is the content to sign.", "utf-8", bIncludeBom);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        String base64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=";
        String jwsJson;
        try {
            jws.setMacKey(0, base64Key, "base64");

            // Because an unprotected header is present, the JWS is produced in a JSON serialization form.
            jwsJson = jws.createJws();
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        System.out.println(jwsJson);
    }
}