|
Chilkat • HOME • .NET Core C# • Android™ • AutoIt • C • C# • C++ • Chilkat2-Python • CkPython • Classic ASP • DataFlex • Delphi ActiveX • Delphi DLL • Go • Java • Lianja • Mono C# • Node.js • Objective-C • PHP ActiveX • PHP Extension • Perl • PowerBuilder • PowerShell • PureBasic • Ruby • SQL Server • Swift 2 • Swift 3,4,5... • Tcl • Unicode C • Unicode C++ • VB.NET • VBScript • Visual Basic 6.0 • Visual FoxPro • Xojo Plugin
(Classic ASP) Validate a JWS Using ECDSA P-256 SHA-256Validates a JSON Web Signature (JWS) that uses ECDSA P-256 SHA-256 Note: This example requires Chilkat v9.5.0.66 or greater.
<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> </head> <body> <% ' This requires the Chilkat API to have been previously unlocked. ' See Global Unlock Sample for sample code. ' Note: This example requires Chilkat v9.5.0.66 or greater. ' This example takes a JSON signature in compact serialization format, ' and uses an ECDSA public key to validate and recover the protected header and payload. ' We only need a public key for signature validation. This is the ECDSA public key ' that is used: ' {"kty":"EC", ' "crv":"P-256", ' "x":"f83OJ3D2xF1Bg8vub9tLe1gHMzV76e8Tus9uPHvRVEU", ' "y":"x_FEzRu9m36HLN_tue659LNpXW6pCyStikYjKIWI5a0" ' } ' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.StringBuilder") set sbPubKey = Server.CreateObject("Chilkat.StringBuilder") success = sbPubKey.Append("{""kty"":""EC"",") success = sbPubKey.Append("""crv"":""P-256"",") success = sbPubKey.Append("""x"":""f83OJ3D2xF1Bg8vub9tLe1gHMzV76e8Tus9uPHvRVEU"",") success = sbPubKey.Append("""y"":""x_FEzRu9m36HLN_tue659LNpXW6pCyStikYjKIWI5a0""") success = sbPubKey.Append("}") ' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.PublicKey") set pubKey = Server.CreateObject("Chilkat.PublicKey") success = pubKey.LoadFromString(sbPubKey.GetAsString()) If (success <> 1) Then Response.Write "<pre>" & Server.HTMLEncode( pubKey.LastErrorText) & "</pre>" Response.End End If ' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Jws") set jws = Server.CreateObject("Chilkat.Jws") ' Set the ECC public key: signatureIndex = 0 success = jws.SetPublicKey(signatureIndex,pubKey) ' Load the JWS. ' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.StringBuilder") set sbJws = Server.CreateObject("Chilkat.StringBuilder") success = sbJws.Append("eyJhbGciOiJFUzI1NiJ9") success = sbJws.Append(".") success = sbJws.Append("eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFt") success = sbJws.Append("cGxlLmNvbS9pc19yb290Ijp0cnVlfQ") success = sbJws.Append(".") success = sbJws.Append("DtEhU3ljbEg8L38VWAfUAqOyKAM6-Xx-F4GawxaepmXFCgfTjDxw5djxLa8ISlSA") success = sbJws.Append("pmWQxfKTUJqPP3-Kg6NU1Q") success = jws.LoadJwsSb(sbJws) If (success <> 1) Then Response.Write "<pre>" & Server.HTMLEncode( jws.LastErrorText) & "</pre>" Response.End End If ' Validate the 1st (and only) signature at index 0.. v = jws.Validate(signatureIndex) If (v < 0) Then ' Perhaps Chilkat was not unlocked or the trial expired.. Response.Write "<pre>" & Server.HTMLEncode( "Method call failed for some other reason.") & "</pre>" Response.Write "<pre>" & Server.HTMLEncode( jws.LastErrorText) & "</pre>" Response.End End If If (v = 0) Then Response.Write "<pre>" & Server.HTMLEncode( "Invalid signature. The ECC key was incorrect, the JWS was invalid, or both.") & "</pre>" Response.End End If ' If we get here, the signature was validated.. Response.Write "<pre>" & Server.HTMLEncode( "Signature validated.") & "</pre>" Response.Write "<pre>" & Server.HTMLEncode( "--") & "</pre>" ' Recover the original content: Response.Write "<pre>" & Server.HTMLEncode( "Recovered content:") & "</pre>" Response.Write "<pre>" & Server.HTMLEncode( jws.GetPayload("utf-8")) & "</pre>" Response.Write "<pre>" & Server.HTMLEncode( "--") & "</pre>" ' Examine the protected header: ' joseHeader is a Chilkat.JsonObject Set joseHeader = jws.GetProtectedHeader(signatureIndex) If (jws.LastMethodSuccess <> 1) Then Response.Write "<pre>" & Server.HTMLEncode( "No protected header found at the given index.") & "</pre>" Response.End End If joseHeader.EmitCompact = 0 Response.Write "<pre>" & Server.HTMLEncode( "Protected (JOSE) header:") & "</pre>" Response.Write "<pre>" & Server.HTMLEncode( joseHeader.Emit()) & "</pre>" ' Output: ' Signature validated. ' -- ' Recovered content: ' {"iss":"joe", ' "exp":1300819380, ' "http://example.com/is_root":true} ' -- ' Protected (JOSE) header: ' { ' "alg": "ES256" ' } %> </body> </html> |
||||
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.