Decrypt a JWE into BinData

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.DecryptBd, which decrypts a recipient of a loaded JWE and writes the plaintext bytes into a BinData.

llSuccess = .F.

loJwe = createobject("CkJwe")

//  Load the JWE compact serialization to be decrypted.
lcJweCompact = "eyJhbGciOiJBMjU2S1ciLCJlbmMiOiJBMjU2R0NNIn0.<...>.<iv>.<ciphertext>.<tag>"
llSuccess = loJwe.LoadJwe(lcJweCompact)
if (llSuccess = .F.) then
    ? loJwe.LastErrorText
    release loJwe
    return
endif

//  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key
//  from a secure source rather than hard-coding it.
lcBase64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
llSuccess = loJwe.SetWrappingKey(0,lcBase64Key,"base64")
if (llSuccess = .F.) then
    ? loJwe.LastErrorText
    release loJwe
    return
endif

//  Decrypt recipient index 0, writing the plaintext bytes into a BinData.
loBd = createobject("CkBinData")
llSuccess = loJwe.DecryptBd(0,loBd)
if (llSuccess = .F.) then
    ? loJwe.LastErrorText
    release loJwe
    release loBd
    return
endif

? "Decrypted " + str(loBd.NumBytes) + " bytes."


release loJwe
release loBd