Set a Per-Recipient JWE Header

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetRecipientHeader, which sets the per-recipient unprotected header for a recipient index.

integer li_rc
integer li_Success
oleobject loo_Jwe
oleobject loo_Header
string ls_Base64Key
oleobject loo_RecipHeader
oleobject loo_SbContent
oleobject loo_SbJwe

li_Success = 0

loo_Jwe = create oleobject
li_rc = loo_Jwe.ConnectToNewObject("Chilkat.Jwe")
if li_rc < 0 then
    destroy loo_Jwe
    MessageBox("Error","Connecting to COM object failed")
    return
end if

//  Protected header: AES key-wrap with AES-256-GCM content encryption.
loo_Header = create oleobject
li_rc = loo_Header.ConnectToNewObject("Chilkat.JsonObject")

loo_Header.UpdateString("alg","A256KW")
loo_Header.UpdateString("enc","A256GCM")
li_Success = loo_Jwe.SetProtectedHeader(loo_Header)
if li_Success = 0 then
    Write-Debug loo_Jwe.LastErrorText
    destroy loo_Jwe
    destroy loo_Header
    return
end if

//  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key from a
//  secure source rather than hard-coding it.
ls_Base64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
li_Success = loo_Jwe.SetWrappingKey(0,ls_Base64Key,"base64")
if li_Success = 0 then
    Write-Debug loo_Jwe.LastErrorText
    destroy loo_Jwe
    destroy loo_Header
    return
end if

//  Set the per-recipient unprotected header for recipient 0, for example a key id used to identify
//  which key a recipient should use.
loo_RecipHeader = create oleobject
li_rc = loo_RecipHeader.ConnectToNewObject("Chilkat.JsonObject")

loo_RecipHeader.UpdateString("kid","recipient-key-1")
li_Success = loo_Jwe.SetRecipientHeader(0,loo_RecipHeader)
if li_Success = 0 then
    Write-Debug loo_Jwe.LastErrorText
    destroy loo_Jwe
    destroy loo_Header
    destroy loo_RecipHeader
    return
end if

loo_SbContent = create oleobject
li_rc = loo_SbContent.ConnectToNewObject("Chilkat.StringBuilder")

loo_SbContent.Append("This is the secret content.")
loo_SbJwe = create oleobject
li_rc = loo_SbJwe.ConnectToNewObject("Chilkat.StringBuilder")

li_Success = loo_Jwe.EncryptSb(loo_SbContent,"utf-8",loo_SbJwe)
if li_Success = 0 then
    Write-Debug loo_Jwe.LastErrorText
    destroy loo_Jwe
    destroy loo_Header
    destroy loo_RecipHeader
    destroy loo_SbContent
    destroy loo_SbJwe
    return
end if

Write-Debug loo_SbJwe.GetAsString()


destroy loo_Jwe
destroy loo_Header
destroy loo_RecipHeader
destroy loo_SbContent
destroy loo_SbJwe