(Node.js) Duplicate Java Secure Token Creation

Demonstrates how to duplicate some Java code that creates an RSA signature to create a base64 token.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOS

var os = require('os');
if (os.platform() == 'win32') {  
  var chilkat = require('@chilkat/ck-node23-win64'); 
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node23-linux-arm');
    } else if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node23-linux-arm64');
    } else {
        var chilkat = require('@chilkat/ck-node23-linux-x64');
    }
} else if (os.platform() == 'darwin') {
  var chilkat = require('@chilkat/ck-node23-mac-universal');
}

function chilkatExample() {

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // This example duplicates the following Java code:

    // public X509Certificate2 cert = new X509Certificate2(@"Some path to p12/p12file_name.p12","Password_for_p12"); 
    // 
    // public string GenerateSignToken(double timeValidityMin){ 
    //   string equalsSign = ":="; 
    //   string timeCreated = DateTime.Now.ToString("yyyy-MM-ddTHH:mm:ss.fffzzz"); 
    //   string tokenTimeInfo = "validityTimeMinutes" + equalsSign + timeValidityMin + ";"+"timeCreated" + equalsSign + timeCreated; 
    //   string signature = SignData(tokenTimeInfo); 
    //   string secureToken = tokenTimeInfo + ";" + "signature" + equalsSign + signature; 
    //   return Base64UrlEncode(secureToken); 
    // } 
    //  
    // public string SignData(string stringToSign){ 
    //   byte[] dataToSign = Encoding.UTF8.GetBytes(stringToSign); 
    //   RSACryptoServiceProvider privKey = (RSACryptoServiceProvider)cert.PrivateKey; 
    //   CspKeyContainerInfo containerInfo = new RSACryptoServiceProvider().CspKeyContainerInfo; 
    //   CspParameters cspparams = new CspParameters(containerInfo.ProviderType, containerInfo.ProviderName, privKey.CspKeyContainerInfo.KeyContainerName); 
    //   privKey = new RSACryptoServiceProvider(cspparams); 
    //   string id = CryptoConfig.MapNameToOID("SHA256"); 
    //   byte[] sign = privKey.SignData(dataToSign, id); 
    //   bool res = privKey.VerifyData(dataToSign, id, sign); 
    //   return Convert.ToBase64String(sign).Replace('+', '-').Replace('/', '_').Replace("=", ""); 
    // } 
    //  
    // private static string Base64UrlEncode(string input){ 
    //   var inputBytes = Encoding.UTF8.GetBytes(input); 
    //   return Convert.ToBase64String(inputBytes).Replace('+', '-').Replace('/', '_').Replace("=", ""); 
    // } 

    var success;

    var dt = new chilkat.CkDateTime();
    dt.SetFromCurrentSystemTime();
    var timeCreated = dt.GetAsTimestamp(true);

    // Such as 2019-04-01T19:35:44-05:00
    console.log(timeCreated);

    var sbToken = new chilkat.StringBuilder();
    sbToken.Append("validityTimeMinutes:=10.0;timeCreated:=");
    sbToken.Append(timeCreated);

    var cert = new chilkat.Cert();
    success = cert.LoadPfxFile("Some path to p12/p12file_name.p12","Password_for_p12");
    if (success !== true) {
        console.log(cert.LastErrorText);
        return;
    }

    var rsa = new chilkat.Rsa();
    success = rsa.SetX509Cert(cert,true);
    if (success !== true) {
        console.log(rsa.LastErrorText);
        return;
    }

    rsa.EncodingMode = "base64url";

    var signature = rsa.SignStringENC(sbToken.GetAsString(),"sha256");
    if (rsa.LastMethodSuccess == false) {
        console.log(rsa.LastErrorText);
        return;
    }

    sbToken.Append(";signature:=");
    sbToken.Append(signature);

    // Base64URL encode the result
    sbToken.Encode("base64url","utf-8");
    var token = sbToken.GetAsString();

    console.log(token);

}

chilkatExample();