Sample code for 30+ languages & platforms
JavaScript

Validate a JWS with a Public Key

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetPublicKey, which sets the public key used to validate a signature of a loaded JWS.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

Background. The public key verifies a signature created with the corresponding private key. Validate returns 1 when valid, 0 when not, or a negative value on error.
Note
This example is intended for running within a Chilkat.Js embedded JavaScript engine. All Chilkat JavaScript examples require Chilkat v11.4.0 or greater.
JavaScript
var success = false;

var jws = new CkJws();

//  Load the JWS compact serialization.
var jwsCompact = "eyJhbGciOiJIUzI1NiJ9.VGhpcyBpcyB0aGUgY29udGVudCB0byBzaWduLg.<signature>";
success = jws.LoadJws(jwsCompact);
if (success == false) {
    console.log(jws.LastErrorText);
    return;
}

//  The file path is relative to the application's current working directory.  An absolute path
//  may also be used.  Supply the path appropriate to your own environment.
//  Load the signer's public key and set it for validating signature 0.
var pubKey = new CkPublicKey();
success = pubKey.LoadFromFile("qa_data/signer_pubkey.pem");
if (success == false) {
    console.log(pubKey.LastErrorText);
    return;
}

success = jws.SetPublicKey(0,pubKey);
if (success == false) {
    console.log(jws.LastErrorText);
    return;
}

//  Validate the signature.  Validate returns 1 when valid, 0 when not, or a negative value on error.
var v = jws.Validate(0);
if (v < 0) {
    console.log(jws.LastErrorText);
    return;
}

if (v !== 1) {
    console.log("The signature is not valid.");
    return;
}

console.log("The signature is valid.");