Sign a JWS with a Certificate

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetSigningCert, which sets the certificate whose associated private key is used to create a signature.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

llSuccess = .F.

loJws = createobject("CkJws")

//  Protected header specifying RSASSA-PKCS1-v1_5 with SHA-256 (RS256).
loHeader = createobject("CkJsonObject")
loHeader.UpdateString("alg","RS256")
llSuccess = loJws.SetProtectedHeader(0,loHeader)
if (llSuccess = .F.) then
    ? loJws.LastErrorText
    release loJws
    release loHeader
    return
endif

llBIncludeBom = .F.
llSuccess = loJws.SetPayload("This is the content to sign.","utf-8",llBIncludeBom)
if (llSuccess = .F.) then
    ? loJws.LastErrorText
    release loJws
    release loHeader
    return
endif

//  The file path is relative to the application's current working directory.  An absolute path
//  may also be used.  Supply the path appropriate to your own environment.
//  The PFX password should come from a secure source rather than being hard-coded.
lcPfxPassword = "myPfxPassword"

//  Load a certificate that has an associated private key, then set it as the signing certificate for
//  signature 0.  The certificate's private key is used to create the signature.
loCert = createobject("CkCert")
llSuccess = loCert.LoadPfxFile("qa_data/signer.pfx",lcPfxPassword)
if (llSuccess = .F.) then
    ? loCert.LastErrorText
    release loJws
    release loHeader
    release loCert
    return
endif

llSuccess = loJws.SetSigningCert(0,loCert)
if (llSuccess = .F.) then
    ? loJws.LastErrorText
    release loJws
    release loHeader
    release loCert
    return
endif

lcJwsCompact = loJws.CreateJws()
if (loJws.LastMethodSuccess = .F.) then
    ? loJws.LastErrorText
    release loJws
    release loHeader
    release loCert
    return
endif

? lcJwsCompact


release loJws
release loHeader
release loCert