Validate a JWS Signature

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.Validate, which validates exactly one signature, identified by a zero-based index, using the key configured at that same index.

#include <C_CkJwsW.h>

void ChilkatSample(void)
    {
    BOOL success;
    HCkJwsW jws;
    const wchar_t *jwsCompact;
    const wchar_t *base64Key;
    int v;

    success = FALSE;

    jws = CkJwsW_Create();

    //  Load the JWS compact serialization.
    jwsCompact = L"eyJhbGciOiJIUzI1NiJ9.VGhpcyBpcyB0aGUgY29udGVudCB0byBzaWduLg.<signature>";
    success = CkJwsW_LoadJws(jws,jwsCompact);
    if (success == FALSE) {
        wprintf(L"%s\n",CkJwsW_lastErrorText(jws));
        CkJwsW_Dispose(jws);
        return;
    }

    //  Provide the key for signature 0 (here an HMAC key).
    base64Key = L"YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=";
    success = CkJwsW_SetMacKey(jws,0,base64Key,L"base64");
    if (success == FALSE) {
        wprintf(L"%s\n",CkJwsW_lastErrorText(jws));
        CkJwsW_Dispose(jws);
        return;
    }

    //  Validate the signature identified by the zero-based index, using the key configured at that index.
    //  Validate returns 1 when the signature or MAC is cryptographically valid, 0 when it is not, or a
    //  negative value on error.
    v = CkJwsW_Validate(jws,0);
    if (v < 0) {
        wprintf(L"%s\n",CkJwsW_lastErrorText(jws));
        CkJwsW_Dispose(jws);
        return;
    }

    if (v != 1) {
        wprintf(L"The signature is not valid.\n");
        CkJwsW_Dispose(jws);
        return;
    }

    wprintf(L"The signature is valid.\n");


    CkJwsW_Dispose(jws);

    }