(DataFlex) Validate JWS Using RSASSA-PKCS1-v1_5 SHA-256

Validates a JSON Web Signature (JWS) that uses RSASSA-PKCS1-v1_5 SHA-256.

Note: This example requires Chilkat v9.5.0.66 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Use ChilkatAx-win32.pkg

Procedure Test
    Handle hoSbPubKey
    Boolean iSuccess
    Variant vPubKey
    Handle hoPubKey
    Boolean iSuccess
    Handle hoJws
    Integer iSignatureIndex
    Variant vSbJws
    Handle hoSbJws
    Integer v
    Variant vJoseHeader
    Handle hoJoseHeader
    String sTemp1
    Boolean bTemp1

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Note: This example requires Chilkat v9.5.0.66 or greater.

    // This example takes a JSON signature in compact serialization format,
    // and uses an RSA public key to validate and recover the protected header and payload.

    // We only need a public key for signature validation.  This is the RSA public key
    // that is used:

    //      {"kty":"RSA", 
    //       "n":"ofgWCuLjybRlzo0tZWJjNiuSfb4p4fAkd_wWJcyQoTbji9k0l8W26mPddx
    //            HmfHQp-Vaw-4qPCJrcS2mJPMEzP1Pt0Bm4d4QlL-yRT-SFd2lZS-pCgNMs
    //            D1W_YpRPEwOWvG6b32690r2jZ47soMZo9wGzjb_7OMg0LOL-bSf63kpaSH
    //            SXndS5z5rexMdbBYUsLA9e-KXBdQOS-UTo7WTBEMa2R2CapHg665xsmtdV
    //            MTBQY4uDZlxvb3qCo5ZwKh9kG4LT6_I5IhlJH7aGhyxXFvUK-DWNmoudF8
    //            NAco9_h9iaGNj8q2ethFkMLs91kzk2PAcDTW9gb54h4FRWyuXpoQ", 
    //       "e":"AQAB"
    //      }

    Get Create (RefClass(cComChilkatStringBuilder)) To hoSbPubKey
    If (Not(IsComObjectCreated(hoSbPubKey))) Begin
        Send CreateComObject of hoSbPubKey
    End
    Get ComAppend Of hoSbPubKey '{"kty":"RSA",' To iSuccess
    Get ComAppend Of hoSbPubKey '"n":"ofgWCuLjybRlzo0tZWJjNiuSfb4p4fAkd_wWJcyQoTbji9k0l8W26mPddx' To iSuccess
    Get ComAppend Of hoSbPubKey "HmfHQp-Vaw-4qPCJrcS2mJPMEzP1Pt0Bm4d4QlL-yRT-SFd2lZS-pCgNMs" To iSuccess
    Get ComAppend Of hoSbPubKey "D1W_YpRPEwOWvG6b32690r2jZ47soMZo9wGzjb_7OMg0LOL-bSf63kpaSH" To iSuccess
    Get ComAppend Of hoSbPubKey "SXndS5z5rexMdbBYUsLA9e-KXBdQOS-UTo7WTBEMa2R2CapHg665xsmtdV" To iSuccess
    Get ComAppend Of hoSbPubKey "MTBQY4uDZlxvb3qCo5ZwKh9kG4LT6_I5IhlJH7aGhyxXFvUK-DWNmoudF8" To iSuccess
    Get ComAppend Of hoSbPubKey 'NAco9_h9iaGNj8q2ethFkMLs91kzk2PAcDTW9gb54h4FRWyuXpoQ",' To iSuccess
    Get ComAppend Of hoSbPubKey '"e":"AQAB"' To iSuccess
    Get ComAppend Of hoSbPubKey "}" To iSuccess

    Get Create (RefClass(cComChilkatPublicKey)) To hoPubKey
    If (Not(IsComObjectCreated(hoPubKey))) Begin
        Send CreateComObject of hoPubKey
    End
    Get ComGetAsString Of hoSbPubKey To sTemp1
    Get ComLoadFromString Of hoPubKey sTemp1 To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoPubKey To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get Create (RefClass(cComChilkatJws)) To hoJws
    If (Not(IsComObjectCreated(hoJws))) Begin
        Send CreateComObject of hoJws
    End

    // Set the RSA public key:
    Move 0 To iSignatureIndex
    Get pvComObject of hoPubKey to vPubKey
    Get ComSetPublicKey Of hoJws iSignatureIndex vPubKey To iSuccess

    // Load the JWS.
    Get Create (RefClass(cComChilkatStringBuilder)) To hoSbJws
    If (Not(IsComObjectCreated(hoSbJws))) Begin
        Send CreateComObject of hoSbJws
    End
    Get ComAppend Of hoSbJws "eyJhbGciOiJSUzI1NiJ9" To iSuccess
    Get ComAppend Of hoSbJws "." To iSuccess
    Get ComAppend Of hoSbJws "eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFt" To iSuccess
    Get ComAppend Of hoSbJws "cGxlLmNvbS9pc19yb290Ijp0cnVlfQ" To iSuccess
    Get ComAppend Of hoSbJws "." To iSuccess
    Get ComAppend Of hoSbJws "cC4hiUPoj9Eetdgtv3hF80EGrhuB__dzERat0XF9g2VtQgr9PJbu3XOiZj5RZmh7" To iSuccess
    Get ComAppend Of hoSbJws "AAuHIm4Bh-0Qc_lF5YKt_O8W2Fp5jujGbds9uJdbF9CUAr7t1dnZcAcQjbKBYNX4" To iSuccess
    Get ComAppend Of hoSbJws "BAynRFdiuB--f_nZLgrnbyTyWzO75vRK5h6xBArLIARNPvkSjtQBMHlb1L07Qe7K" To iSuccess
    Get ComAppend Of hoSbJws "0GarZRmB_eSN9383LcOLn6_dO--xi12jzDwusC-eOkHWEsqtFZESc6BfI7noOPqv" To iSuccess
    Get ComAppend Of hoSbJws "hJ1phCnvWh6IeYI2w9QOYEUipUTI8np6LbgGY9Fs98rqVt5AXLIhWkWywlVmtVrB" To iSuccess
    Get ComAppend Of hoSbJws "p0igcN_IoypGlUPQGe77Rw" To iSuccess

    Get pvComObject of hoSbJws to vSbJws
    Get ComLoadJwsSb Of hoJws vSbJws To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoJws To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Validate the 1st (and only) signature at index 0..
    Get ComValidate Of hoJws iSignatureIndex To v
    If (v < 0) Begin
        // Perhaps Chilkat was not unlocked or the trial expired..
        Showln "Method call failed for some other reason."
        Get ComLastErrorText Of hoJws To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    If (v = 0) Begin
        Showln "Invalid signature.  The RSA key was incorrect, the JWS was invalid, or both."
        Procedure_Return
    End

    // If we get here, the signature was validated..
    Showln "Signature validated."
    Showln "--"

    // Recover the original content:
    Showln "Recovered content:"
    Get ComGetPayload Of hoJws "utf-8" To sTemp1
    Showln sTemp1
    Showln "--"

    // Examine the protected header:
    Get ComGetProtectedHeader Of hoJws iSignatureIndex To vJoseHeader
    If (IsComObject(vJoseHeader)) Begin
        Get Create (RefClass(cComChilkatJsonObject)) To hoJoseHeader
        Set pvComObject Of hoJoseHeader To vJoseHeader
    End
    Get ComLastMethodSuccess Of hoJws To bTemp1
    If (bTemp1 <> True) Begin
        Showln "No protected header found at the given index."
        Procedure_Return
    End

    Set ComEmitCompact Of hoJoseHeader To False

    Showln "Protected (JOSE) header:"
    Get ComEmit Of hoJoseHeader To sTemp1
    Showln sTemp1
    Send Destroy of hoJoseHeader

    // Output:

    // 	Signature validated.
    // 	--
    // 	Recovered content:
    // 	{"iss":"joe", 
    // 	 "exp":1300819380,
    // 	 "http://example.com/is_root":true}
    // 	--
    // 	Protected (JOSE) header:
    // 	{ 
    // 	  "alg": "RS256"
    // 	}


End_Procedure