B4X

Duplicate Java Secure Token Creation

See more RSA Examples

Demonstrates how to duplicate some Java code that creates an RSA signature to create a base64 token. B4X

Dim success As Boolean = False

'  This requires the Chilkat API to have been previously unlocked.
'  See Global Unlock Sample for sample code.

'  This example duplicates the following Java code:

'  public X509Certificate2 cert = new X509Certificate2(@"Some path to p12/p12file_name.p12","Password_for_p12"); 
'  
'  public string GenerateSignToken(double timeValidityMin){ 
'    string equalsSign = ":="; 
'    string timeCreated = DateTime.Now.ToString("yyyy-MM-ddTHH:mm:ss.fffzzz"); 
'    string tokenTimeInfo = "validityTimeMinutes" + equalsSign + timeValidityMin + ";"+"timeCreated" + equalsSign + timeCreated; 
'    string signature = SignData(tokenTimeInfo); 
'    string secureToken = tokenTimeInfo + ";" + "signature" + equalsSign + signature; 
'    return Base64UrlEncode(secureToken); 
'  } 
'   
'  public string SignData(string stringToSign){ 
'    byte[] dataToSign = Encoding.UTF8.GetBytes(stringToSign); 
'    RSACryptoServiceProvider privKey = (RSACryptoServiceProvider)cert.PrivateKey; 
'    CspKeyContainerInfo containerInfo = new RSACryptoServiceProvider().CspKeyContainerInfo; 
'    CspParameters cspparams = new CspParameters(containerInfo.ProviderType, containerInfo.ProviderName, privKey.CspKeyContainerInfo.KeyContainerName); 
'    privKey = new RSACryptoServiceProvider(cspparams); 
'    string id = CryptoConfig.MapNameToOID("SHA256"); 
'    byte[] sign = privKey.SignData(dataToSign, id); 
'    bool res = privKey.VerifyData(dataToSign, id, sign); 
'    return Convert.ToBase64String(sign).Replace('+', '-').Replace('/', '_').Replace("=", ""); 
'  } 
'   
'  private static string Base64UrlEncode(string input){ 
'    var inputBytes = Encoding.UTF8.GetBytes(input); 
'    return Convert.ToBase64String(inputBytes).Replace('+', '-').Replace('/', '_').Replace("=", ""); 
'  } 

Dim dt As ChilkatDateTime
dt.Initialize
dt.SetFromCurrentSystemTime
Dim timeCreated As String = dt.GetAsTimestamp(True)

'  Such as 2019-04-01T19:35:44-05:00
Log(timeCreated)

Dim sbToken As ChilkatStringBuilder
sbToken.Initialize
sbToken.Append("validityTimeMinutes:=10.0;timeCreated:=")
sbToken.Append(timeCreated)

Dim cert As ChilkatCert
cert.Initialize("cert")
success = cert.LoadPfxFile("Some path to p12/p12file_name.p12", "Password_for_p12")
If success <> True Then
    Log(cert.LastErrorText)
    Return
End If


Dim rsa As ChilkatRsa
rsa.Initialize
success = rsa.SetX509Cert(cert, True)
If success <> True Then
    Log(rsa.LastErrorText)
    Return
End If


rsa.EncodingMode = "base64url"

Dim signature As String = rsa.SignStringENC(sbToken.GetAsString, "sha256")
If rsa.LastMethodSuccess = False Then
    Log(rsa.LastErrorText)
    Return
End If


sbToken.Append(";signature:=")
sbToken.Append(signature)

'  Base64URL encode the result
sbToken.Encode("base64url", "utf-8")
Dim token As String = sbToken.GetAsString

Log(token)