Set the Optional JWS Unprotected Header

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetUnprotectedHeader, which sets the optional unprotected header for a signature.

local chilkat = require("chilkat")

local jws = chilkat.Jws.new()

-- Protected header specifying HMAC-SHA256.
local header = chilkat.JsonObject.new()
header:update_string("alg", "HS256")
local success = jws:set_protected_header(0, header)
if not success then
    print(jws.last_error_text)
    return
end

-- Set the optional unprotected header for signature 0.  Unlike the protected header, it is not
-- covered by the signature.  It is carried in the JSON serialization forms of a JWS.
local unprotected = chilkat.JsonObject.new()
unprotected:update_string("kid", "signer-key-1")
success = jws:set_unprotected_header(0, unprotected)
if not success then
    print(jws.last_error_text)
    return
end

local bIncludeBom = false
success = jws:set_payload("This is the content to sign.", "utf-8", bIncludeBom)
if not success then
    print(jws.last_error_text)
    return
end

local base64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
success = jws:set_mac_key(0, base64Key, "base64")
if not success then
    print(jws.last_error_text)
    return
end

-- Because an unprotected header is present, the JWS is produced in a JSON serialization form.
local jwsJson = jws:create_jws()
if not jws.last_method_success then
    print(jws.last_error_text)
    return
end

print(jwsJson)