(Node.js) Validate JWS Using HMAC SHA-256

Validates a JSON Web Signature (JWS) using HMAC SHA-256.

Note: This example requires Chilkat v9.5.0.66 or greater.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Note: This example requires Chilkat v9.5.0.66 or greater.

    // This example takes a JSON signature in compact serialization format,
    // and uses a MAC key to validate and recover the protected header and payload.

    var jws = new chilkat.Jws();

    // Set the HMAC key:
    var hmacKey = "AyM1SysPpbyDfgZld3umj1qzKObwVMkoqQ-EstJQLr_T-1qS0gZH75aKtMN3Yj0iPS4hcgUuTwjAzZr1Z9CAow";
    var signatureIndex = 0;
    jws.SetMacKey(signatureIndex,hmacKey,"base64url");

    // Load the JWS.
    var jwsCompact = "eyJ0eXAiOiJKV1QiLA0KICJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFtcGxlLmNvbS9pc19yb290Ijp0cnVlfQ.dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk";
    var success = jws.LoadJws(jwsCompact);

    // Validate the 1st (and only) signature at index 0..
    var v = jws.Validate(signatureIndex);
    if (v < 0) {
        // Perhaps Chilkat was not unlocked or the trial expired..
        console.log("Method call failed for some other reason.");
        console.log(jws.LastErrorText);
        return;
    }

    if (v == 0) {
        console.log("Invalid signature.  The MAC key was incorrect, the JWS was invalid, or both.");
        return;
    }

    // If we get here, the signature was validated..
    console.log("Signature validated.");

    // Recover the original content:
    console.log("Recovered content:");
    console.log(jws.GetPayload("utf-8"));

    // Examine the protected header:
    // joseHeader: JsonObject
    var joseHeader = jws.GetProtectedHeader(signatureIndex);
    if (jws.LastMethodSuccess !== true) {
        console.log("No protected header found at the given index.");
        return;
    }

    joseHeader.EmitCompact = false;

    console.log("Protected (JOSE) header:");
    console.log(joseHeader.Emit());

    // Output:

    // 	Signature validated.
    // 	Recovered content:
    // 	{"iss":"joe",
    // 	 "exp":1300819380,
    // 	 "http://example.com/is_root":true}
    // 	Protected (JOSE) header:
    // 	{ 
    // 	  "typ": "JWT",
    // 	  "alg": "HS256"
    // 	}

}

chilkatExample();