Sample code for 30+ languages & platforms
Java

bitzlato.com whoami

See more JSON Web Token (JWT) Examples

Demonstrates sending a request to the bitzlato.com whoami endpoint using an ES256 JWT token for authentication.

Chilkat Java Downloads

Chilkat2 Java
import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.Http;
import com.chilkatsoft.chilkat2.JsonObject;
import com.chilkatsoft.chilkat2.Jwt;
import com.chilkatsoft.chilkat2.PrivateKey;

public class ChilkatExample {

    public static void main(String[] args) {
        // This example requires the Chilkat API to have been previously unlocked.
        // See Global Unlock Sample for sample code.

        //  Use the following ECC key loaded from JWK format.
        JsonObject jwk = new JsonObject();
        jwk.updateString("kty", "EC");
        jwk.updateString("crv", "P-256");
        jwk.updateString("x", "...");
        jwk.updateString("y", "...");
        jwk.updateString("d", "...");

        PrivateKey eccKey = new PrivateKey();
        try {
            eccKey.loadJwk(jwk.emit());
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        Jwt jwt = new Jwt();

        // Build the JOSE header
        JsonObject jose = new JsonObject();
        jose.appendString("format", "compact");
        jose.appendString("alg", "ES256");

        // Now build the JWT claims (also known as the payload)

        // Our JWT claims will contain members as shown here:

        //     {
        //       "email":"your_email@example.com",
        //       "aud":"usr",
        //       "iat":"1588286154",
        //       "jti":"555D9123"
        //     }

        JsonObject claims = new JsonObject();
        claims.appendString("jti", "555D9123");
        claims.appendString("email", "your_email@example.com");

        // Set the timestamp of when the JWT was created to now minus 60 seconds
        int curDateTime = jwt.genNumericDate(-60);
        claims.addIntAt(-1, "iat", curDateTime);

        // Set the "not process before" timestamp to now minus 60 seconds
        claims.addIntAt(-1, "nbf", curDateTime);

        // Set the timestamp defining an expiration time (end time) for the token
        // to be now + 1 hour (3600 seconds)
        claims.addIntAt(-1, "exp", curDateTime + 3600);

        claims.appendString("aud", "usr");

        // Produce the smallest possible JWT:
        jwt.setAutoCompact(true);

        // Create the JWT token.  This is where the RSA signature is created.
        String jwt_token = jwt.createJwtPk(jose.emit(), claims.emit(), eccKey);

        System.out.println(jwt_token);

        // Send the HTTPS GET with the jwt_token used for Authorization.
        Http http = new Http();
        http.setAuthToken(jwt_token);
        String responseStr;
        try {
            responseStr = http.quickGetStr("https://bitzlato.com/api/auth/whoami");
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        System.out.println("status code = " + http.getLastStatus());
        System.out.println(responseStr);
    }
}