Set a Per-Recipient JWE Header

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetRecipientHeader, which sets the per-recipient unprotected header for a recipient index.

LOCAL nSuccess
LOCAL oJwe
LOCAL oHeader
LOCAL cBase64Key
LOCAL oRecipHeader
LOCAL oSbContent
LOCAL oSbJwe

nSuccess := 0

oJwe := CreateObject("Chilkat.Jwe")

//  Protected header: AES key-wrap with AES-256-GCM content encryption.
oHeader := CreateObject("Chilkat.JsonObject")
oHeader:UpdateString("alg", "A256KW")
oHeader:UpdateString("enc", "A256GCM")
nSuccess := oJwe:SetProtectedHeader(oHeader)
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    RETURN
ENDIF

//  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key from a
//  secure source rather than hard-coding it.
cBase64Key := "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
nSuccess := oJwe:SetWrappingKey(0, cBase64Key, "base64")
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    RETURN
ENDIF

//  Set the per-recipient unprotected header for recipient 0, for example a key id used to identify
//  which key a recipient should use.
oRecipHeader := CreateObject("Chilkat.JsonObject")
oRecipHeader:UpdateString("kid", "recipient-key-1")
nSuccess := oJwe:SetRecipientHeader(0, oRecipHeader)
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    oRecipHeader:destroy()
    RETURN
ENDIF

oSbContent := CreateObject("Chilkat.StringBuilder")
oSbContent:Append("This is the secret content.")
oSbJwe := CreateObject("Chilkat.StringBuilder")
nSuccess := oJwe:EncryptSb(oSbContent, "utf-8", oSbJwe)
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    oRecipHeader:destroy()
    oSbContent:destroy()
    oSbJwe:destroy()
    RETURN
ENDIF

? oSbJwe:GetAsString()

oJwe:destroy()
oHeader:destroy()
oRecipHeader:destroy()
oSbContent:destroy()
oSbJwe:destroy()