PowerShell

Set the Optional JWS Unprotected Header

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetUnprotectedHeader, which sets the optional unprotected header for a signature.

Background. Unlike the protected header, the unprotected header is not covered by the signature. It is carried in the JSON serialization forms of a JWS, so producing a JWS with an unprotected header yields a JSON serialization rather than compact form.

Chilkat PowerShell Downloads

Download Chilkat for PowerShell

PowerShell

Add-Type -Path "C:\chilkat\ChilkatDotNet47-x64\ChilkatDotNet47.dll"

$success = $false

$jws = New-Object Chilkat.Jws

#  Protected header specifying HMAC-SHA256.
$header = New-Object Chilkat.JsonObject
$header.UpdateString("alg","HS256")
$success = $jws.SetProtectedHeader(0,$header)
if ($success -eq $false) {
    $($jws.LastErrorText)
    exit
}

#  Set the optional unprotected header for signature 0.  Unlike the protected header, it is not
#  covered by the signature.  It is carried in the JSON serialization forms of a JWS.
$unprotected = New-Object Chilkat.JsonObject
$unprotected.UpdateString("kid","signer-key-1")
$success = $jws.SetUnprotectedHeader(0,$unprotected)
if ($success -eq $false) {
    $($jws.LastErrorText)
    exit
}

$bIncludeBom = $false
$success = $jws.SetPayload("This is the content to sign.","utf-8",$bIncludeBom)
if ($success -eq $false) {
    $($jws.LastErrorText)
    exit
}

$base64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
$success = $jws.SetMacKey(0,$base64Key,"base64")
if ($success -eq $false) {
    $($jws.LastErrorText)
    exit
}

#  Because an unprotected header is present, the JWS is produced in a JSON serialization form.
$jwsJson = $jws.CreateJws()
if ($jws.LastMethodSuccess -eq $false) {
    $($jws.LastErrorText)
    exit
}

$($jwsJson)