Set the Optional JWS Unprotected Header

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetUnprotectedHeader, which sets the optional unprotected header for a signature.

<?php

use Chilkat2\JsonObject;
use Chilkat2\Jws;

$jws = new Jws();

// Protected header specifying HMAC-SHA256.
$header = new JsonObject();
$header->UpdateString('alg', 'HS256');
try {
    $jws->SetProtectedHeader(0, $header);

    // Set the optional unprotected header for signature 0.  Unlike the protected header, it is not
    // covered by the signature.  It is carried in the JSON serialization forms of a JWS.
    $unprotected = new JsonObject();
    $unprotected->UpdateString('kid', 'signer-key-1');
    $jws->SetUnprotectedHeader(0, $unprotected);

    $bIncludeBom = false;
    $jws->SetPayload('This is the content to sign.', 'utf-8', $bIncludeBom);

    $base64Key = 'YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=';
    $jws->SetMacKey(0, $base64Key, 'base64');

    // Because an unprotected header is present, the JWS is produced in a JSON serialization form.
    $jwsJson = $jws->CreateJws();
} catch (\Chilkat2\Exception $e) {
    echo $e->getMessage(), "\n";
    exit;
}

echo $jwsJson, "\n";