Pascal (Lazarus/Delphi)

bitzlato.com whoami

See more JSON Web Token (JWT) Examples

Demonstrates sending a request to the bitzlato.com whoami endpoint using an ES256 JWT token for authentication. Pascal (Lazarus/Delphi)

program ChilkatDemo;

// Demonstrates using the Chilkat Pascal wrapper via the C bridge DLL.
// Builds as a console application under Lazarus (FPC) or Delphi.

{$IFDEF FPC}
  {$MODE DELPHI}
{$ENDIF}
{$APPTYPE CONSOLE}

uses
  {$IFDEF UNIX}
  cthreads,
  {$ENDIF}
  SysUtils,
  CkDllLoader,
  Chilkat.Http,
  Chilkat.PrivateKey,
  Chilkat.Jwt,
  Chilkat.JsonObject;

// ---------------------------------------------------------------------------

procedure RunDemo;
var
  success: Boolean;
  jwk: TJsonObject;
  eccKey: TPrivateKey;
  jwt: TJwt;
  jose: TJsonObject;
  claims: TJsonObject;
  curDateTime: Integer;
  jwt_token: string;
  http: THttp;
  responseStr: string;

begin
  success := False;

  //  This example requires the Chilkat API to have been previously unlocked.
  //  See Global Unlock Sample for sample code.

  //   Use the following ECC key loaded from JWK format.
  jwk := TJsonObject.Create;
  success := jwk.UpdateString('kty','EC');
  success := jwk.UpdateString('crv','P-256');
  success := jwk.UpdateString('x','...');
  success := jwk.UpdateString('y','...');
  success := jwk.UpdateString('d','...');

  eccKey := TPrivateKey.Create;
  success := eccKey.LoadJwk(jwk.Emit());
  if (success = False) then
    begin
      WriteLn(eccKey.LastErrorText);
      Exit;
    end;

  jwt := TJwt.Create;

  //  Build the JOSE header
  jose := TJsonObject.Create;
  success := jose.AppendString('format','compact');
  success := jose.AppendString('alg','ES256');

  //  Now build the JWT claims (also known as the payload)

  //  Our JWT claims will contain members as shown here:

  //  	{
  //  	  "email":"your_email@example.com",
  //  	  "aud":"usr",
  //  	  "iat":"1588286154",
  //  	  "jti":"555D9123"
  //  	}

  claims := TJsonObject.Create;
  claims.AppendString('jti','555D9123');
  claims.AppendString('email','your_email@example.com');

  //  Set the timestamp of when the JWT was created to now minus 60 seconds
  curDateTime := jwt.GenNumericDate(-60);
  success := claims.AddIntAt(-1,'iat',curDateTime);

  //  Set the "not process before" timestamp to now minus 60 seconds
  success := claims.AddIntAt(-1,'nbf',curDateTime);

  //  Set the timestamp defining an expiration time (end time) for the token
  //  to be now + 1 hour (3600 seconds)
  success := claims.AddIntAt(-1,'exp',curDateTime + 3600);

  claims.AppendString('aud','usr');

  //  Produce the smallest possible JWT:
  jwt.AutoCompact := True;

  //  Create the JWT token.  This is where the RSA signature is created.
  jwt_token := jwt.CreateJwtPk(jose.Emit(),claims.Emit(),eccKey);

  WriteLn(jwt_token);

  //  Send the HTTPS GET with the jwt_token used for Authorization.
  http := THttp.Create;
  http.AuthToken := jwt_token;
  responseStr := http.QuickGetStr('https://bitzlato.com/api/auth/whoami');
  if (http.LastMethodSuccess = False) then
    begin
      WriteLn(http.LastErrorText);
      Exit;
    end;

  WriteLn('status code = ' + http.LastStatus);
  WriteLn(responseStr);


  jwk.Free;
  eccKey.Free;
  jwt.Free;
  jose.Free;
  claims.Free;
  http.Free;

end;

// ---------------------------------------------------------------------------

begin

  try
    RunDemo;
  except
    on E: Exception do
      WriteLn('Unhandled exception: ', E.ClassName, ': ', E.Message);
  end;

  WriteLn;
  {$IFDEF MSWINDOWS}
  WriteLn('Press Enter to exit...');
  ReadLn;
  {$ENDIF}
end.