Lua

Compute a Public Key's JWK Thumbprint

Demonstrates the Chilkat PublicKey.GetJwkThumbprint method, which returns the RFC 7638 JWK thumbprint for the public key. The only argument is the hash algorithm (for example sha256).

Note: The file paths are relative to the application's current working directory. Absolute paths may also be used. Supply the paths appropriate to your own environment.

Background: A JWK thumbprint is a canonical hash of the key's public parameters — a compact fingerprint that identifies the key regardless of formatting. It is the standard way to derive a stable key ID (kid) and to check whether two representations are the same key. Chilkat builds the required canonical JSON, hashes it with the named algorithm, and returns the result.

Chilkat Lua Downloads

Download Chilkat for Lua

Lua

local chilkat = require("chilkat")

-- Load a public key to export.  LoadFromFile inspects the content, so it accepts DER, PEM, XML,
-- JWK, and other supported representations.
local pubKey = chilkat.PublicKey.new()
local success = pubKey:load_from_file("qa_data/public.pem")
if not success then
    print(pubKey.last_error_text)
    return
end

-- Compute the RFC 7638 JWK thumbprint of the public key using the named hash algorithm.  Common
-- values include "sha256".
local thumbprint = pubKey:get_jwk_thumbprint("sha256")
if not pubKey.last_method_success then
    print(pubKey.last_error_text)
    return
end

print("JWK thumbprint: " .. thumbprint)