(Tcl) bitzlato.com whoami

Demonstrates sending a request to the bitzlato.com whoami endpoint using an ES256 JWT token for authentication.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

#  Use the following ECC key loaded from JWK format.
set jwk [new_CkJsonObject]

set success [CkJsonObject_UpdateString $jwk "kty" "EC"]
set success [CkJsonObject_UpdateString $jwk "crv" "P-256"]
set success [CkJsonObject_UpdateString $jwk "x" "..."]
set success [CkJsonObject_UpdateString $jwk "y" "..."]
set success [CkJsonObject_UpdateString $jwk "d" "..."]

set eccKey [new_CkPrivateKey]

set success [CkPrivateKey_LoadJwk $eccKey [CkJsonObject_emit $jwk]]
if {$success == 0} then {
    puts [CkPrivateKey_lastErrorText $eccKey]
    delete_CkJsonObject $jwk
    delete_CkPrivateKey $eccKey
    exit
}

set jwt [new_CkJwt]

# Build the JOSE header
set jose [new_CkJsonObject]

set success [CkJsonObject_AppendString $jose "format" "compact"]
set success [CkJsonObject_AppendString $jose "alg" "ES256"]

# Now build the JWT claims (also known as the payload)

# Our JWT claims will contain members as shown here:

# 	{
# 	  "email":"your_email@example.com",
# 	  "aud":"usr",
# 	  "iat":"1588286154",
# 	  "jti":"555D9123"
# 	}

set claims [new_CkJsonObject]

CkJsonObject_AppendString $claims "jti" "555D9123"
CkJsonObject_AppendString $claims "email" "your_email@example.com"

# Set the timestamp of when the JWT was created to now minus 60 seconds
set curDateTime [CkJwt_GenNumericDate $jwt -60]
set success [CkJsonObject_AddIntAt $claims -1 "iat" $curDateTime]

# Set the "not process before" timestamp to now minus 60 seconds
set success [CkJsonObject_AddIntAt $claims -1 "nbf" $curDateTime]

# Set the timestamp defining an expiration time (end time) for the token
# to be now + 1 hour (3600 seconds)
set success [CkJsonObject_AddIntAt $claims -1 "exp" [expr $curDateTime + 3600]]

CkJsonObject_AppendString $claims "aud" "usr"

# Produce the smallest possible JWT:
CkJwt_put_AutoCompact $jwt 1

# Create the JWT token.  This is where the RSA signature is created.
set jwt_token [CkJwt_createJwtPk $jwt [CkJsonObject_emit $jose] [CkJsonObject_emit $claims] $eccKey]

puts "$jwt_token"

# Send the HTTPS GET with the jwt_token used for Authorization.
set http [new_CkHttp]

CkHttp_put_AuthToken $http $jwt_token
set responseStr [CkHttp_quickGetStr $http "https://bitzlato.com/api/auth/whoami"]
if {[CkHttp_get_LastMethodSuccess $http] == 0} then {
    puts [CkHttp_lastErrorText $http]
    delete_CkJsonObject $jwk
    delete_CkPrivateKey $eccKey
    delete_CkJwt $jwt
    delete_CkJsonObject $jose
    delete_CkJsonObject $claims
    delete_CkHttp $http
    exit
}

puts "status code = [CkHttp_get_LastStatus $http]"
puts "$responseStr"

delete_CkJsonObject $jwk
delete_CkPrivateKey $eccKey
delete_CkJwt $jwt
delete_CkJsonObject $jose
delete_CkJsonObject $claims
delete_CkHttp $http