Set a Per-Recipient JWE Header

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetRecipientHeader, which sets the per-recipient unprotected header for a recipient index.

let jwe = chilkat::Jwe::new();

// Protected header: AES key-wrap with AES-256-GCM content encryption.
let header = chilkat::JsonObject::new();
let _ = header.update_string("alg", "A256KW");
let _ = header.update_string("enc", "A256GCM");
if jwe.set_protected_header(&header).is_err() {
    println!("{}", jwe.last_error_text());
    return;
}

// The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key from a
// secure source rather than hard-coding it.
let base64_key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=".to_string();
if jwe.set_wrapping_key(0, &base64_key, "base64").is_err() {
    println!("{}", jwe.last_error_text());
    return;
}

// Set the per-recipient unprotected header for recipient 0, for example a key id used to identify
// which key a recipient should use.
let recip_header = chilkat::JsonObject::new();
let _ = recip_header.update_string("kid", "recipient-key-1");
if jwe.set_recipient_header(0, &recip_header).is_err() {
    println!("{}", jwe.last_error_text());
    return;
}

let sb_content = chilkat::StringBuilder::new();
let _ = sb_content.append("This is the secret content.");
let sb_jwe = chilkat::StringBuilder::new();
if jwe.encrypt_sb(&sb_content, "utf-8", &sb_jwe).is_err() {
    println!("{}", jwe.last_error_text());
    return;
}

println!("{}", sb_jwe.get_as_string().unwrap_or_default());