(PHP Extension) bitzlato.com whoami

Demonstrates sending a request to the bitzlato.com whoami endpoint using an ES256 JWT token for authentication.

Chilkat PHP Downloads PHP Extension for Windows, Linux, MacOS, Alpine Linux, Solaris

<?php

// The version number (9_5_0) should match version of the Chilkat extension used, omitting the micro-version number.
// For example, if using Chilkat v9.5.0.48, then include as shown here:
include("chilkat_9_5_0.php");

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

//  Use the following ECC key loaded from JWK format.
$jwk = new CkJsonObject();
$success = $jwk->UpdateString('kty','EC');
$success = $jwk->UpdateString('crv','P-256');
$success = $jwk->UpdateString('x','...');
$success = $jwk->UpdateString('y','...');
$success = $jwk->UpdateString('d','...');

$eccKey = new CkPrivateKey();
$success = $eccKey->LoadJwk($jwk->emit());
if ($success == false) {
    print $eccKey->lastErrorText() . "\n";
    exit;
}

$jwt = new CkJwt();

// Build the JOSE header
$jose = new CkJsonObject();
$success = $jose->AppendString('format','compact');
$success = $jose->AppendString('alg','ES256');

// Now build the JWT claims (also known as the payload)

// Our JWT claims will contain members as shown here:

// 	{
// 	  "email":"your_email@example.com",
// 	  "aud":"usr",
// 	  "iat":"1588286154",
// 	  "jti":"555D9123"
// 	}

$claims = new CkJsonObject();
$claims->AppendString('jti','555D9123');
$claims->AppendString('email','your_email@example.com');

// Set the timestamp of when the JWT was created to now minus 60 seconds
$curDateTime = $jwt->GenNumericDate(-60);
$success = $claims->AddIntAt(-1,'iat',$curDateTime);

// Set the "not process before" timestamp to now minus 60 seconds
$success = $claims->AddIntAt(-1,'nbf',$curDateTime);

// Set the timestamp defining an expiration time (end time) for the token
// to be now + 1 hour (3600 seconds)
$success = $claims->AddIntAt(-1,'exp',$curDateTime + 3600);

$claims->AppendString('aud','usr');

// Produce the smallest possible JWT:
$jwt->put_AutoCompact(true);

// Create the JWT token.  This is where the RSA signature is created.
$jwt_token = $jwt->createJwtPk($jose->emit(),$claims->emit(),$eccKey);

print $jwt_token . "\n";

// Send the HTTPS GET with the jwt_token used for Authorization.
$http = new CkHttp();
$http->put_AuthToken($jwt_token);
$responseStr = $http->quickGetStr('https://bitzlato.com/api/auth/whoami');
if ($http->get_LastMethodSuccess() == false) {
    print $http->lastErrorText() . "\n";
    exit;
}

print 'status code = ' . $http->get_LastStatus() . "\n";
print $responseStr . "\n";

?>