Sample code for 30+ languages & platforms
PHP

Sign a JWS with an HMAC Key

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetMacKey, which sets the symmetric MAC key for a signature. The key bytes are supplied in a named encoding such as hex or base64.

Background. HMAC-based JWS (for example HS256) authenticates the payload with a shared symmetric key that both signer and verifier possess.

Chilkat PHP Downloads

Chilkat2 PHP
<?php

use Chilkat2\JsonObject;
use Chilkat2\Jws;

$jws = new Jws();

// Protected header specifying HMAC-SHA256.
$header = new JsonObject();
$header->UpdateString('alg', 'HS256');
try {
    $jws->SetProtectedHeader(0, $header);

    $bIncludeBom = false;
    $jws->SetPayload('This is the content to sign.', 'utf-8', $bIncludeBom);

    // Set the symmetric MAC key for signature 0.  The key bytes are provided in the named encoding (here
    // base64).  In production, obtain the key from a secure source rather than hard-coding it.
    $base64Key = 'YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=';
    $jws->SetMacKey(0, $base64Key, 'base64');

    $jwsCompact = $jws->CreateJws();
} catch (\Chilkat2\Exception $e) {
    echo $e->getMessage(), "\n";
    exit;
}

echo $jwsCompact, "\n";