Perl
Chilkat2 Perl
Set the Shared JWE Unprotected Header
See more JSON Web Encryption (JWE) Examples
Demonstrates Jwe.SetUnprotectedHeader, which sets the shared JWE unprotected header from a JsonObject.
Background. The unprotected header is shared by all recipients but, unlike the protected header, is not integrity-protected. It is carried in the JSON serialization forms of a JWE.
Chilkat Perl Downloads
use strict;
use warnings;
use Chilkat2;
my $jwe = Chilkat2::Jwe->new;
# Protected header: AES key-wrap with AES-256-GCM content encryption.
my $header = Chilkat2::JsonObject->new;
$header->UpdateString('alg', 'A256KW');
$header->UpdateString('enc', 'A256GCM');
my $success = $jwe->SetProtectedHeader($header);
if (!$success) {
print $jwe->LastErrorText, "\n";
exit;
}
# The 256-bit key-wrapping key (base64) for recipient index 0. In production, obtain the key from a
# secure source rather than hard-coding it.
my $base64Key = 'YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=';
$success = $jwe->SetWrappingKey(0, $base64Key, 'base64');
if (!$success) {
print $jwe->LastErrorText, "\n";
exit;
}
# Set the shared JWE unprotected header. It is shared by all recipients but, unlike the protected
# header, is not integrity-protected.
my $unprotected = Chilkat2::JsonObject->new;
$unprotected->UpdateString('cty', 'text/plain');
$success = $jwe->SetUnprotectedHeader($unprotected);
if (!$success) {
print $jwe->LastErrorText, "\n";
exit;
}
my $sbContent = Chilkat2::StringBuilder->new;
$sbContent->Append('This is the secret content.');
my $sbJwe = Chilkat2::StringBuilder->new;
$success = $jwe->EncryptSb($sbContent, 'utf-8', $sbJwe);
if (!$success) {
print $jwe->LastErrorText, "\n";
exit;
}
print $sbJwe->GetAsString(), "\n";