(C) Duplicate Java Secure Token Creation

Demonstrates how to duplicate some Java code that creates an RSA signature to create a base64 token.

Chilkat C/C++ Library Downloads
MS Visual C/C++ Linux/CentOS C/C++ Alpine Linux C/C++ MAC OS X C/C++	armhf/aarch64 C/C++ C++ Builder iOS C/C++ Android C/C++	Solaris C/C++ MinGW C/C++

#include <C_CkDateTime.h>
#include <C_CkStringBuilder.h>
#include <C_CkCert.h>
#include <C_CkRsa.h>

void ChilkatSample(void)
    {
    BOOL success;
    HCkDateTime dt;
    const char *timeCreated;
    HCkStringBuilder sbToken;
    HCkCert cert;
    HCkRsa rsa;
    const char *signature;
    const char *token;

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // This example duplicates the following Java code:

    // public X509Certificate2 cert = new X509Certificate2(@"Some path to p12/p12file_name.p12","Password_for_p12"); 
    // 
    // public string GenerateSignToken(double timeValidityMin){ 
    //   string equalsSign = ":="; 
    //   string timeCreated = DateTime.Now.ToString("yyyy-MM-ddTHH:mm:ss.fffzzz"); 
    //   string tokenTimeInfo = "validityTimeMinutes" + equalsSign + timeValidityMin + ";"+"timeCreated" + equalsSign + timeCreated; 
    //   string signature = SignData(tokenTimeInfo); 
    //   string secureToken = tokenTimeInfo + ";" + "signature" + equalsSign + signature; 
    //   return Base64UrlEncode(secureToken); 
    // } 
    //  
    // public string SignData(string stringToSign){ 
    //   byte[] dataToSign = Encoding.UTF8.GetBytes(stringToSign); 
    //   RSACryptoServiceProvider privKey = (RSACryptoServiceProvider)cert.PrivateKey; 
    //   CspKeyContainerInfo containerInfo = new RSACryptoServiceProvider().CspKeyContainerInfo; 
    //   CspParameters cspparams = new CspParameters(containerInfo.ProviderType, containerInfo.ProviderName, privKey.CspKeyContainerInfo.KeyContainerName); 
    //   privKey = new RSACryptoServiceProvider(cspparams); 
    //   string id = CryptoConfig.MapNameToOID("SHA256"); 
    //   byte[] sign = privKey.SignData(dataToSign, id); 
    //   bool res = privKey.VerifyData(dataToSign, id, sign); 
    //   return Convert.ToBase64String(sign).Replace('+', '-').Replace('/', '_').Replace("=", ""); 
    // } 
    //  
    // private static string Base64UrlEncode(string input){ 
    //   var inputBytes = Encoding.UTF8.GetBytes(input); 
    //   return Convert.ToBase64String(inputBytes).Replace('+', '-').Replace('/', '_').Replace("=", ""); 
    // } 

    dt = CkDateTime_Create();
    CkDateTime_SetFromCurrentSystemTime(dt);
    timeCreated = CkDateTime_getAsTimestamp(dt,TRUE);

    // Such as 2019-04-01T19:35:44-05:00
    printf("%s\n",timeCreated);

    sbToken = CkStringBuilder_Create();
    CkStringBuilder_Append(sbToken,"validityTimeMinutes:=10.0;timeCreated:=");
    CkStringBuilder_Append(sbToken,timeCreated);

    cert = CkCert_Create();
    success = CkCert_LoadPfxFile(cert,"Some path to p12/p12file_name.p12","Password_for_p12");
    if (success != TRUE) {
        printf("%s\n",CkCert_lastErrorText(cert));
        CkDateTime_Dispose(dt);
        CkStringBuilder_Dispose(sbToken);
        CkCert_Dispose(cert);
        return;
    }

    rsa = CkRsa_Create();
    success = CkRsa_SetX509Cert(rsa,cert,TRUE);
    if (success != TRUE) {
        printf("%s\n",CkRsa_lastErrorText(rsa));
        CkDateTime_Dispose(dt);
        CkStringBuilder_Dispose(sbToken);
        CkCert_Dispose(cert);
        CkRsa_Dispose(rsa);
        return;
    }

    CkRsa_putEncodingMode(rsa,"base64url");

    signature = CkRsa_signStringENC(rsa,CkStringBuilder_getAsString(sbToken),"sha256");
    if (CkRsa_getLastMethodSuccess(rsa) == FALSE) {
        printf("%s\n",CkRsa_lastErrorText(rsa));
        CkDateTime_Dispose(dt);
        CkStringBuilder_Dispose(sbToken);
        CkCert_Dispose(cert);
        CkRsa_Dispose(rsa);
        return;
    }

    CkStringBuilder_Append(sbToken,";signature:=");
    CkStringBuilder_Append(sbToken,signature);

    // Base64URL encode the result
    CkStringBuilder_Encode(sbToken,"base64url","utf-8");
    token = CkStringBuilder_getAsString(sbToken);

    printf("%s\n",token);


    CkDateTime_Dispose(dt);
    CkStringBuilder_Dispose(sbToken);
    CkCert_Dispose(cert);
    CkRsa_Dispose(rsa);

    }