(Classic ASP) Duplicate Java Secure Token Creation

Demonstrates how to duplicate some Java code that creates an RSA signature to create a base64 token.

Chilkat ActiveX Downloads

ActiveX for 32-bit and 64-bit Windows

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<%
' This requires the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

' This example duplicates the following Java code:

' public X509Certificate2 cert = new X509Certificate2(@"Some path to p12/p12file_name.p12","Password_for_p12"); 
' 
' public string GenerateSignToken(double timeValidityMin){ 
'   string equalsSign = ":="; 
'   string timeCreated = DateTime.Now.ToString("yyyy-MM-ddTHH:mm:ss.fffzzz"); 
'   string tokenTimeInfo = "validityTimeMinutes" + equalsSign + timeValidityMin + ";"+"timeCreated" + equalsSign + timeCreated; 
'   string signature = SignData(tokenTimeInfo); 
'   string secureToken = tokenTimeInfo + ";" + "signature" + equalsSign + signature; 
'   return Base64UrlEncode(secureToken); 
' } 
'  
' public string SignData(string stringToSign){ 
'   byte[] dataToSign = Encoding.UTF8.GetBytes(stringToSign); 
'   RSACryptoServiceProvider privKey = (RSACryptoServiceProvider)cert.PrivateKey; 
'   CspKeyContainerInfo containerInfo = new RSACryptoServiceProvider().CspKeyContainerInfo; 
'   CspParameters cspparams = new CspParameters(containerInfo.ProviderType, containerInfo.ProviderName, privKey.CspKeyContainerInfo.KeyContainerName); 
'   privKey = new RSACryptoServiceProvider(cspparams); 
'   string id = CryptoConfig.MapNameToOID("SHA256"); 
'   byte[] sign = privKey.SignData(dataToSign, id); 
'   bool res = privKey.VerifyData(dataToSign, id, sign); 
'   return Convert.ToBase64String(sign).Replace('+', '-').Replace('/', '_').Replace("=", ""); 
' } 
'  
' private static string Base64UrlEncode(string input){ 
'   var inputBytes = Encoding.UTF8.GetBytes(input); 
'   return Convert.ToBase64String(inputBytes).Replace('+', '-').Replace('/', '_').Replace("=", ""); 
' } 

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.CkDateTime")
set dt = Server.CreateObject("Chilkat.CkDateTime")
success = dt.SetFromCurrentSystemTime()
timeCreated = dt.GetAsTimestamp(1)

' Such as 2019-04-01T19:35:44-05:00
Response.Write "<pre>" & Server.HTMLEncode( timeCreated) & "</pre>"

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.StringBuilder")
set sbToken = Server.CreateObject("Chilkat.StringBuilder")
success = sbToken.Append("validityTimeMinutes:=10.0;timeCreated:=")
success = sbToken.Append(timeCreated)

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Cert")
set cert = Server.CreateObject("Chilkat.Cert")
success = cert.LoadPfxFile("Some path to p12/p12file_name.p12","Password_for_p12")
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( cert.LastErrorText) & "</pre>"
    Response.End
End If

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Rsa")
set rsa = Server.CreateObject("Chilkat.Rsa")
success = rsa.SetX509Cert(cert,1)
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( rsa.LastErrorText) & "</pre>"
    Response.End
End If

rsa.EncodingMode = "base64url"

signature = rsa.SignStringENC(sbToken.GetAsString(),"sha256")
If (rsa.LastMethodSuccess = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( rsa.LastErrorText) & "</pre>"
    Response.End
End If

success = sbToken.Append(";signature:=")
success = sbToken.Append(signature)

' Base64URL encode the result
success = sbToken.Encode("base64url","utf-8")
token = sbToken.GetAsString()

Response.Write "<pre>" & Server.HTMLEncode( token) & "</pre>"

%>
</body>
</html>