Lianja

Set a Per-Recipient JWE Header

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetRecipientHeader, which sets the per-recipient unprotected header for a recipient index.

Background. Per-recipient headers carry recipient-specific values such as a key id (kid), and are used with the JSON serialization forms that support multiple recipients.

Chilkat Lianja Downloads

Download Chilkat for Lianja

Lianja

llSuccess = .F.

loJwe = createobject("CkJwe")

//  Protected header: AES key-wrap with AES-256-GCM content encryption.
loHeader = createobject("CkJsonObject")
loHeader.UpdateString("alg","A256KW")
loHeader.UpdateString("enc","A256GCM")
llSuccess = loJwe.SetProtectedHeader(loHeader)
if (llSuccess = .F.) then
    ? loJwe.LastErrorText
    release loJwe
    release loHeader
    return
endif

//  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key from a
//  secure source rather than hard-coding it.
lcBase64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
llSuccess = loJwe.SetWrappingKey(0,lcBase64Key,"base64")
if (llSuccess = .F.) then
    ? loJwe.LastErrorText
    release loJwe
    release loHeader
    return
endif

//  Set the per-recipient unprotected header for recipient 0, for example a key id used to identify
//  which key a recipient should use.
loRecipHeader = createobject("CkJsonObject")
loRecipHeader.UpdateString("kid","recipient-key-1")
llSuccess = loJwe.SetRecipientHeader(0,loRecipHeader)
if (llSuccess = .F.) then
    ? loJwe.LastErrorText
    release loJwe
    release loHeader
    release loRecipHeader
    return
endif

loSbContent = createobject("CkStringBuilder")
loSbContent.Append("This is the secret content.")
loSbJwe = createobject("CkStringBuilder")
llSuccess = loJwe.EncryptSb(loSbContent,"utf-8",loSbJwe)
if (llSuccess = .F.) then
    ? loJwe.LastErrorText
    release loJwe
    release loHeader
    release loRecipHeader
    release loSbContent
    release loSbJwe
    return
endif

? loSbJwe.GetAsString()


release loJwe
release loHeader
release loRecipHeader
release loSbContent
release loSbJwe