Decrypt a JWE into BinData

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.DecryptBd, which decrypts a recipient of a loaded JWE and writes the plaintext bytes into a BinData.

local chilkat = require("chilkat")

local jwe = chilkat.Jwe.new()

-- Load the JWE compact serialization to be decrypted.
local jweCompact = "eyJhbGciOiJBMjU2S1ciLCJlbmMiOiJBMjU2R0NNIn0.<...>.<iv>.<ciphertext>.<tag>"
local success = jwe:load_jwe(jweCompact)
if not success then
    print(jwe.last_error_text)
    return
end

-- The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key
-- from a secure source rather than hard-coding it.
local base64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
success = jwe:set_wrapping_key(0, base64Key, "base64")
if not success then
    print(jwe.last_error_text)
    return
end

-- Decrypt recipient index 0, writing the plaintext bytes into a BinData.
local bd = chilkat.BinData.new()
success = jwe:decrypt_bd(0, bd)
if not success then
    print(jwe.last_error_text)
    return
end

print("Decrypted " .. bd.num_bytes .. " bytes.")