(Lianja) Create JWT Using HS256, HS384, or HS512

Demonstrates how to create a JWT using HS256, HS384, or HS512. (HS256 is JWT's acronym for HMAC-SHA256.) When HMAC is used, the secret is a shared secret (i.e. password) that both client and server know beforehand.

This example also demonstrates how to include time constraints:

• nbf: Not Before Time
• exp: Expiration Time
• iat: Issue At Time

Chilkat Lianja Extension Download Chilkat Lianja Extension

// Demonstrates how to create an HMAC JWT using a shared secret (password).

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

loJwt = createobject("CkJwt")

// Build the JOSE header
loJose = createobject("CkJsonObject")
// Use HS256.  Pass the string "HS384" or "HS512" to use a different algorithm.
llSuccess = loJose.AppendString("alg","HS256")
llSuccess = loJose.AppendString("typ","JWT")

// Now build the JWT claims (also known as the payload)
loClaims = createobject("CkJsonObject")
llSuccess = loClaims.AppendString("iss","http://example.org")
llSuccess = loClaims.AppendString("sub","John")
llSuccess = loClaims.AppendString("aud","http://example.com")

// Set the timestamp of when the JWT was created to now.
lnCurDateTime = loJwt.GenNumericDate(0)
llSuccess = loClaims.AddIntAt(-1,"iat",lnCurDateTime)

// Set the "not process before" timestamp to now.
llSuccess = loClaims.AddIntAt(-1,"nbf",lnCurDateTime)

// Set the timestamp defining an expiration time (end time) for the token
// to be now + 1 hour (3600 seconds)
llSuccess = loClaims.AddIntAt(-1,"exp",lnCurDateTime + 3600)

// Produce the smallest possible JWT:
loJwt.AutoCompact = .T.

lcStrJwt = loJwt.CreateJwt(loJose.Emit(),loClaims.Emit(),"secret")

? lcStrJwt


release loJwt
release loJose
release loClaims