Validate a JWS Signature

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.Validate, which validates exactly one signature, identified by a zero-based index, using the key configured at that same index.

use strict;
use warnings;
use Chilkat2;

my $jws = Chilkat2::Jws->new;

# Load the JWS compact serialization.
my $jwsCompact = 'eyJhbGciOiJIUzI1NiJ9.VGhpcyBpcyB0aGUgY29udGVudCB0byBzaWduLg.<signature>';
my $success = $jws->LoadJws($jwsCompact);
if (!$success) {
    print $jws->LastErrorText, "\n";
    exit;
}

# Provide the key for signature 0 (here an HMAC key).
my $base64Key = 'YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=';
$success = $jws->SetMacKey(0, $base64Key, 'base64');
if (!$success) {
    print $jws->LastErrorText, "\n";
    exit;
}

# Validate the signature identified by the zero-based index, using the key configured at that index.
# Validate returns 1 when the signature or MAC is cryptographically valid, 0 when it is not, or a
# negative value on error.
my $v = $jws->Validate(0);
if ($v < 0) {
    print $jws->LastErrorText, "\n";
    exit;
}

if ($v != 1) {
    print $jws->LastErrorText, "\n";
    print "The signature is not valid.\n";
    exit;
}

print "The signature is valid.\n";