Unicode C++

Create JWT using a Certificate's Private Key

See more JSON Web Token (JWT) Examples

Demonstrates how to create a JWT using a certificate's private key. Unicode C++

#include <CkCertW.h>
#include <CkJwtW.h>
#include <CkJsonObjectW.h>

void ChilkatSample(void)
    {
    bool success = false;

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Demonstrates how to create a JWT using an certificate's private key.

    CkCertW cert;

    // Load an ECC private key from a PEM file.
    success = cert.LoadPfxFile(L"c:/temp/myPfx.pfx",L"pfxPassword");
    if (success != true) {
        wprintf(L"%s\n",cert.lastErrorText());
        return;
    }

    CkJwtW jwt;

    // Build the JOSE header
    CkJsonObjectW jose;
    // Note: The IsEcdsa function was added in Chilkat v10.1.0
    if (cert.IsEcdsa() == true) {
        // Use ES256.  Pass the string "ES384" or "ES512" to use ECC with SHA-384 or SHA-512.
        jose.AppendString(L"alg",L"ES256");
    }
    else {
        // Probably RSA...
        // Use RS256.  Pass the string "RS384" or "RS512" to use RSA with SHA-384 or SHA-512.
        jose.AppendString(L"alg",L"RS256");
    }

    jose.AppendString(L"typ",L"JWT");

    // Now build the JWT claims (also known as the payload)
    CkJsonObjectW claims;
    claims.AppendString(L"iss",L"http://example.org");
    claims.AppendString(L"sub",L"John");
    claims.AppendString(L"aud",L"http://example.com");

    // Set the timestamp of when the JWT was created to now.
    int curDateTime = jwt.GenNumericDate(0);
    claims.AddIntAt(-1,L"iat",curDateTime);

    // Set the "not process before" timestamp to now.
    claims.AddIntAt(-1,L"nbf",curDateTime);

    // Set the timestamp defining an expiration time (end time) for the token
    // to be now + 1 hour (3600 seconds)
    claims.AddIntAt(-1,L"exp",curDateTime + 3600);

    // Produce the smallest possible JWT:
    jwt.put_AutoCompact(true);

    // Create the JWT token.
    const wchar_t *token = jwt.createJwtCert(jose.emit(),claims.emit(),cert);

    wprintf(L"%s\n",token);

    // Example output:
    // eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJodHRwOi8vZXhhbXBsZS5vcmciLCJzdWIiOiJKb2huIiwiYXVkIjoiaHR0cDovL2V4YW1wbGUuY29tIiwiaWF0IjoxNDg1NzA4NzkyLCJuYmYiOjE0ODU3MDg3OTIsImV4cCI6MTQ4NTcxMjM5Mn0.wqsuyJpxJ073ox-lOiLFqG1lQocXe4hGf2XGZJRrO3qn0UusxI_bu3Gzky8gBsH4sA4u9TWZn5M-1wYMMIJk6Q
    }