Xbase++

Load a JWE from a String

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.LoadJwe, which loads a JWE from its compact serialization string so it can be decrypted.

Background. JWE (JSON Web Encryption) protects content with a content-encryption algorithm (the header enc value) while the content-encryption key is managed by the key-management algorithm (the header alg value). This example uses AES key wrapping with a symmetric wrapping key.

Chilkat Xbase++ Downloads

Download Chilkat for Xbase++

Xbase++

LOCAL nSuccess
LOCAL oJwe
LOCAL cJweCompact
LOCAL cBase64Key
LOCAL cContent

nSuccess := 0

oJwe := CreateObject("Chilkat.Jwe")

//  Load a JWE from its compact serialization string.
cJweCompact := "eyJhbGciOiJBMjU2S1ciLCJlbmMiOiJBMjU2R0NNIn0.<...>.<iv>.<ciphertext>.<tag>"
nSuccess := oJwe:LoadJwe(cJweCompact)
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    RETURN
ENDIF

//  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key
//  from a secure source rather than hard-coding it.
cBase64Key := "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
nSuccess := oJwe:SetWrappingKey(0, cBase64Key, "base64")
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    RETURN
ENDIF

//  The loaded JWE can now be decrypted.
cContent := oJwe:Decrypt(0, "utf-8")
IF (oJwe:LastMethodSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    RETURN
ENDIF

? cContent

oJwe:destroy()