(Java) bitzlato.com whoami

Demonstrates sending a request to the bitzlato.com whoami endpoint using an ES256 JWT token for authentication.

Chilkat Java Downloads Java Libs for Windows, MacOS, Linux, Alpine Linux, Solaris Java Libs for Android

import com.chilkatsoft.*;

public class ChilkatExample {

  static {
    try {
        System.loadLibrary("chilkat");
    } catch (UnsatisfiedLinkError e) {
      System.err.println("Native code library failed to load.\n" + e);
      System.exit(1);
    }
  }

  public static void main(String argv[])
  {
    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    boolean success;

    //  Use the following ECC key loaded from JWK format.
    CkJsonObject jwk = new CkJsonObject();
    success = jwk.UpdateString("kty","EC");
    success = jwk.UpdateString("crv","P-256");
    success = jwk.UpdateString("x","...");
    success = jwk.UpdateString("y","...");
    success = jwk.UpdateString("d","...");

    CkPrivateKey eccKey = new CkPrivateKey();
    success = eccKey.LoadJwk(jwk.emit());
    if (success == false) {
        System.out.println(eccKey.lastErrorText());
        return;
        }

    CkJwt jwt = new CkJwt();

    // Build the JOSE header
    CkJsonObject jose = new CkJsonObject();
    success = jose.AppendString("format","compact");
    success = jose.AppendString("alg","ES256");

    // Now build the JWT claims (also known as the payload)

    // Our JWT claims will contain members as shown here:

    // 	{
    // 	  "email":"your_email@example.com",
    // 	  "aud":"usr",
    // 	  "iat":"1588286154",
    // 	  "jti":"555D9123"
    // 	}

    CkJsonObject claims = new CkJsonObject();
    claims.AppendString("jti","555D9123");
    claims.AppendString("email","your_email@example.com");

    // Set the timestamp of when the JWT was created to now minus 60 seconds
    int curDateTime = jwt.GenNumericDate(-60);
    success = claims.AddIntAt(-1,"iat",curDateTime);

    // Set the "not process before" timestamp to now minus 60 seconds
    success = claims.AddIntAt(-1,"nbf",curDateTime);

    // Set the timestamp defining an expiration time (end time) for the token
    // to be now + 1 hour (3600 seconds)
    success = claims.AddIntAt(-1,"exp",curDateTime+3600);

    claims.AppendString("aud","usr");

    // Produce the smallest possible JWT:
    jwt.put_AutoCompact(true);

    // Create the JWT token.  This is where the RSA signature is created.
    String jwt_token = jwt.createJwtPk(jose.emit(),claims.emit(),eccKey);

    System.out.println(jwt_token);

    // Send the HTTPS GET with the jwt_token used for Authorization.
    CkHttp http = new CkHttp();
    http.put_AuthToken(jwt_token);
    String responseStr = http.quickGetStr("https://bitzlato.com/api/auth/whoami");
    if (http.get_LastMethodSuccess() == false) {
        System.out.println(http.lastErrorText());
        return;
        }

    System.out.println("status code = " + http.get_LastStatus());
    System.out.println(responseStr);
  }
}