(Chilkat2-Python) Duplicate Java Secure Token Creation

Demonstrates how to duplicate some Java code that creates an RSA signature to create a base64 token.

Chilkat2 Python Downloads install with pip pip3 install chilkat2 or download... Python Module for Windows, Linux, Alpine Linux, MacOS, Solaris

import sys
import chilkat2

# This requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# This example duplicates the following Java code:

# public X509Certificate2 cert = new X509Certificate2(@"Some path to p12/p12file_name.p12","Password_for_p12"); 
# 
# public string GenerateSignToken(double timeValidityMin){ 
#   string equalsSign = ":="; 
#   string timeCreated = DateTime.Now.ToString("yyyy-MM-ddTHH:mm:ss.fffzzz"); 
#   string tokenTimeInfo = "validityTimeMinutes" + equalsSign + timeValidityMin + ";"+"timeCreated" + equalsSign + timeCreated; 
#   string signature = SignData(tokenTimeInfo); 
#   string secureToken = tokenTimeInfo + ";" + "signature" + equalsSign + signature; 
#   return Base64UrlEncode(secureToken); 
# } 
#  
# public string SignData(string stringToSign){ 
#   byte[] dataToSign = Encoding.UTF8.GetBytes(stringToSign); 
#   RSACryptoServiceProvider privKey = (RSACryptoServiceProvider)cert.PrivateKey; 
#   CspKeyContainerInfo containerInfo = new RSACryptoServiceProvider().CspKeyContainerInfo; 
#   CspParameters cspparams = new CspParameters(containerInfo.ProviderType, containerInfo.ProviderName, privKey.CspKeyContainerInfo.KeyContainerName); 
#   privKey = new RSACryptoServiceProvider(cspparams); 
#   string id = CryptoConfig.MapNameToOID("SHA256"); 
#   byte[] sign = privKey.SignData(dataToSign, id); 
#   bool res = privKey.VerifyData(dataToSign, id, sign); 
#   return Convert.ToBase64String(sign).Replace('+', '-').Replace('/', '_').Replace("=", ""); 
# } 
#  
# private static string Base64UrlEncode(string input){ 
#   var inputBytes = Encoding.UTF8.GetBytes(input); 
#   return Convert.ToBase64String(inputBytes).Replace('+', '-').Replace('/', '_').Replace("=", ""); 
# } 

dt = chilkat2.CkDateTime()
dt.SetFromCurrentSystemTime()
timeCreated = dt.GetAsTimestamp(True)

# Such as 2019-04-01T19:35:44-05:00
print(timeCreated)

sbToken = chilkat2.StringBuilder()
sbToken.Append("validityTimeMinutes:=10.0;timeCreated:=")
sbToken.Append(timeCreated)

cert = chilkat2.Cert()
success = cert.LoadPfxFile("Some path to p12/p12file_name.p12","Password_for_p12")
if (success != True):
    print(cert.LastErrorText)
    sys.exit()

rsa = chilkat2.Rsa()
success = rsa.SetX509Cert(cert,True)
if (success != True):
    print(rsa.LastErrorText)
    sys.exit()

rsa.EncodingMode = "base64url"

signature = rsa.SignStringENC(sbToken.GetAsString(),"sha256")
if (rsa.LastMethodSuccess == False):
    print(rsa.LastErrorText)
    sys.exit()

sbToken.Append(";signature:=")
sbToken.Append(signature)

# Base64URL encode the result
sbToken.Encode("base64url","utf-8")
token = sbToken.GetAsString()

print(token)