Sample code for 30+ languages & platforms
Ruby

Set the Optional JWS Unprotected Header

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetUnprotectedHeader, which sets the optional unprotected header for a signature.

Background. Unlike the protected header, the unprotected header is not covered by the signature. It is carried in the JSON serialization forms of a JWS, so producing a JWS with an unprotected header yields a JSON serialization rather than compact form.

Chilkat Ruby Downloads

Ruby
require 'chilkat'

success = false

jws = Chilkat::CkJws.new()

#  Protected header specifying HMAC-SHA256.
header = Chilkat::CkJsonObject.new()
header.UpdateString("alg","HS256")
success = jws.SetProtectedHeader(0,header)
if (success == false)
    print jws.lastErrorText() + "\n";
    exit
end

#  Set the optional unprotected header for signature 0.  Unlike the protected header, it is not
#  covered by the signature.  It is carried in the JSON serialization forms of a JWS.
unprotected = Chilkat::CkJsonObject.new()
unprotected.UpdateString("kid","signer-key-1")
success = jws.SetUnprotectedHeader(0,unprotected)
if (success == false)
    print jws.lastErrorText() + "\n";
    exit
end

bIncludeBom = false
success = jws.SetPayload("This is the content to sign.","utf-8",bIncludeBom)
if (success == false)
    print jws.lastErrorText() + "\n";
    exit
end

base64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
success = jws.SetMacKey(0,base64Key,"base64")
if (success == false)
    print jws.lastErrorText() + "\n";
    exit
end

#  Because an unprotected header is present, the JWS is produced in a JSON serialization form.
jwsJson = jws.createJws()
if (jws.get_LastMethodSuccess() == false)
    print jws.lastErrorText() + "\n";
    exit
end

print jwsJson + "\n";