Validate a JWS with a Public Key

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetPublicKey, which sets the public key used to validate a signature of a loaded JWS.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

llSuccess = .F.

loJws = createobject("CkJws")

//  Load the JWS compact serialization.
lcJwsCompact = "eyJhbGciOiJIUzI1NiJ9.VGhpcyBpcyB0aGUgY29udGVudCB0byBzaWduLg.<signature>"
llSuccess = loJws.LoadJws(lcJwsCompact)
if (llSuccess = .F.) then
    ? loJws.LastErrorText
    release loJws
    return
endif

//  The file path is relative to the application's current working directory.  An absolute path
//  may also be used.  Supply the path appropriate to your own environment.
//  Load the signer's public key and set it for validating signature 0.
loPubKey = createobject("CkPublicKey")
llSuccess = loPubKey.LoadFromFile("qa_data/signer_pubkey.pem")
if (llSuccess = .F.) then
    ? loPubKey.LastErrorText
    release loJws
    release loPubKey
    return
endif

llSuccess = loJws.SetPublicKey(0,loPubKey)
if (llSuccess = .F.) then
    ? loJws.LastErrorText
    release loJws
    release loPubKey
    return
endif

//  Validate the signature.  Validate returns 1 when valid, 0 when not, or a negative value on error.
v = loJws.Validate(0)
if (v < 0) then
    ? loJws.LastErrorText
    release loJws
    release loPubKey
    return
endif

if (v <> 1) then
    ? "The signature is not valid."
    release loJws
    release loPubKey
    return
endif

? "The signature is valid."


release loJws
release loPubKey