Rust

Duplicate Java Secure Token Creation

See more RSA Examples

Demonstrates how to duplicate some Java code that creates an RSA signature to create a base64 token. Rust

// This requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// This example duplicates the following Java code:

// public X509Certificate2 cert = new X509Certificate2(@"Some path to p12/p12file_name.p12","Password_for_p12"); 
// 
// public string GenerateSignToken(double timeValidityMin){ 
//   string equalsSign = ":="; 
//   string timeCreated = DateTime.Now.ToString("yyyy-MM-ddTHH:mm:ss.fffzzz"); 
//   string tokenTimeInfo = "validityTimeMinutes" + equalsSign + timeValidityMin + ";"+"timeCreated" + equalsSign + timeCreated; 
//   string signature = SignData(tokenTimeInfo); 
//   string secureToken = tokenTimeInfo + ";" + "signature" + equalsSign + signature; 
//   return Base64UrlEncode(secureToken); 
// } 
//  
// public string SignData(string stringToSign){ 
//   byte[] dataToSign = Encoding.UTF8.GetBytes(stringToSign); 
//   RSACryptoServiceProvider privKey = (RSACryptoServiceProvider)cert.PrivateKey; 
//   CspKeyContainerInfo containerInfo = new RSACryptoServiceProvider().CspKeyContainerInfo; 
//   CspParameters cspparams = new CspParameters(containerInfo.ProviderType, containerInfo.ProviderName, privKey.CspKeyContainerInfo.KeyContainerName); 
//   privKey = new RSACryptoServiceProvider(cspparams); 
//   string id = CryptoConfig.MapNameToOID("SHA256"); 
//   byte[] sign = privKey.SignData(dataToSign, id); 
//   bool res = privKey.VerifyData(dataToSign, id, sign); 
//   return Convert.ToBase64String(sign).Replace('+', '-').Replace('/', '_').Replace("=", ""); 
// } 
//  
// private static string Base64UrlEncode(string input){ 
//   var inputBytes = Encoding.UTF8.GetBytes(input); 
//   return Convert.ToBase64String(inputBytes).Replace('+', '-').Replace('/', '_').Replace("=", ""); 
// } 

let dt = chilkat::DateTime::new();
let _ = dt.set_from_current_system_time();
let time_created = dt.get_as_timestamp(true).unwrap_or_default();

// Such as 2019-04-01T19:35:44-05:00
println!("{}", time_created);

let sb_token = chilkat::StringBuilder::new();
let _ = sb_token.append("validityTimeMinutes:=10.0;timeCreated:=");
let _ = sb_token.append(&time_created);

let cert = chilkat::Cert::new();
if cert.load_pfx_file("Some path to p12/p12file_name.p12", "Password_for_p12").is_err() {
    println!("{}", cert.last_error_text());
    return;
}

let rsa = chilkat::Rsa::new();
if rsa.set_x509_cert(&cert, true).is_err() {
    println!("{}", rsa.last_error_text());
    return;
}

rsa.set_encoding_mode("base64url");

let Ok(signature) = rsa.sign_string_enc(&sb_token.get_as_string().unwrap_or_default(), "sha256") else {
    println!("{}", rsa.last_error_text());
    return;
};

let _ = sb_token.append(";signature:=");
let _ = sb_token.append(&signature);

// Base64URL encode the result
let _ = sb_token.encode("base64url", "utf-8");
let token = sb_token.get_as_string().unwrap_or_default();

println!("{}", token);