Set the Shared JWE Unprotected Header

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetUnprotectedHeader, which sets the shared JWE unprotected header from a JsonObject.

LOCAL nSuccess
LOCAL oJwe
LOCAL oHeader
LOCAL cBase64Key
LOCAL oUnprotected
LOCAL oSbContent
LOCAL oSbJwe

nSuccess := 0

oJwe := CreateObject("Chilkat.Jwe")

//  Protected header: AES key-wrap with AES-256-GCM content encryption.
oHeader := CreateObject("Chilkat.JsonObject")
oHeader:UpdateString("alg", "A256KW")
oHeader:UpdateString("enc", "A256GCM")
nSuccess := oJwe:SetProtectedHeader(oHeader)
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    RETURN
ENDIF

//  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key from a
//  secure source rather than hard-coding it.
cBase64Key := "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
nSuccess := oJwe:SetWrappingKey(0, cBase64Key, "base64")
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    RETURN
ENDIF

//  Set the shared JWE unprotected header.  It is shared by all recipients but, unlike the protected
//  header, is not integrity-protected.
oUnprotected := CreateObject("Chilkat.JsonObject")
oUnprotected:UpdateString("cty", "text/plain")
nSuccess := oJwe:SetUnprotectedHeader(oUnprotected)
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    oUnprotected:destroy()
    RETURN
ENDIF

oSbContent := CreateObject("Chilkat.StringBuilder")
oSbContent:Append("This is the secret content.")
oSbJwe := CreateObject("Chilkat.StringBuilder")
nSuccess := oJwe:EncryptSb(oSbContent, "utf-8", oSbJwe)
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    oUnprotected:destroy()
    oSbContent:destroy()
    oSbJwe:destroy()
    RETURN
ENDIF

? oSbJwe:GetAsString()

oJwe:destroy()
oHeader:destroy()
oUnprotected:destroy()
oSbContent:destroy()
oSbJwe:destroy()