Set JWE Additional Authenticated Data

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetAad, which sets external Additional Authenticated Data (AAD) for a JWE being encrypted, encoding the supplied text with the given charset.

LOCAL nSuccess
LOCAL oJwe
LOCAL oHeader
LOCAL cBase64Key
LOCAL oSbContent
LOCAL oSbJwe

nSuccess := 0

oJwe := CreateObject("Chilkat.Jwe")

//  Protected header: AES key-wrap with AES-256-GCM content encryption.
oHeader := CreateObject("Chilkat.JsonObject")
oHeader:UpdateString("alg", "A256KW")
oHeader:UpdateString("enc", "A256GCM")
nSuccess := oJwe:SetProtectedHeader(oHeader)
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    RETURN
ENDIF

//  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key from a
//  secure source rather than hard-coding it.
cBase64Key := "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
nSuccess := oJwe:SetWrappingKey(0, cBase64Key, "base64")
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    RETURN
ENDIF

//  Set external Additional Authenticated Data (AAD).  The AAD is integrity-protected but not
//  encrypted, and must be supplied again when decrypting.
nSuccess := oJwe:SetAad("context-info-v1", "utf-8")
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    RETURN
ENDIF

oSbContent := CreateObject("Chilkat.StringBuilder")
oSbContent:Append("This is the secret content.")
oSbJwe := CreateObject("Chilkat.StringBuilder")
nSuccess := oJwe:EncryptSb(oSbContent, "utf-8", oSbJwe)
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    oSbContent:destroy()
    oSbJwe:destroy()
    RETURN
ENDIF

? oSbJwe:GetAsString()

oJwe:destroy()
oHeader:destroy()
oSbContent:destroy()
oSbJwe:destroy()