Xbase++

Duplicate Java Secure Token Creation

See more RSA Examples

Demonstrates how to duplicate some Java code that creates an RSA signature to create a base64 token. Xbase++

LOCAL nSuccess
LOCAL oDt
LOCAL cTimeCreated
LOCAL oSbToken
LOCAL oCert
LOCAL oRsa
LOCAL cSignature
LOCAL cToken

nSuccess := 0

//  This requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

//  This example duplicates the following Java code:

//  public X509Certificate2 cert = new X509Certificate2(@"Some path to p12/p12file_name.p12","Password_for_p12"); 
//  
//  public string GenerateSignToken(double timeValidityMin){ 
//    string equalsSign = ":="; 
//    string timeCreated = DateTime.Now.ToString("yyyy-MM-ddTHH:mm:ss.fffzzz"); 
//    string tokenTimeInfo = "validityTimeMinutes" + equalsSign + timeValidityMin + ";"+"timeCreated" + equalsSign + timeCreated; 
//    string signature = SignData(tokenTimeInfo); 
//    string secureToken = tokenTimeInfo + ";" + "signature" + equalsSign + signature; 
//    return Base64UrlEncode(secureToken); 
//  } 
//   
//  public string SignData(string stringToSign){ 
//    byte[] dataToSign = Encoding.UTF8.GetBytes(stringToSign); 
//    RSACryptoServiceProvider privKey = (RSACryptoServiceProvider)cert.PrivateKey; 
//    CspKeyContainerInfo containerInfo = new RSACryptoServiceProvider().CspKeyContainerInfo; 
//    CspParameters cspparams = new CspParameters(containerInfo.ProviderType, containerInfo.ProviderName, privKey.CspKeyContainerInfo.KeyContainerName); 
//    privKey = new RSACryptoServiceProvider(cspparams); 
//    string id = CryptoConfig.MapNameToOID("SHA256"); 
//    byte[] sign = privKey.SignData(dataToSign, id); 
//    bool res = privKey.VerifyData(dataToSign, id, sign); 
//    return Convert.ToBase64String(sign).Replace('+', '-').Replace('/', '_').Replace("=", ""); 
//  } 
//   
//  private static string Base64UrlEncode(string input){ 
//    var inputBytes = Encoding.UTF8.GetBytes(input); 
//    return Convert.ToBase64String(inputBytes).Replace('+', '-').Replace('/', '_').Replace("=", ""); 
//  } 

oDt := CreateObject("Chilkat.CkDateTime")
oDt:SetFromCurrentSystemTime()
cTimeCreated := oDt:GetAsTimestamp(1)

//  Such as 2019-04-01T19:35:44-05:00
? cTimeCreated

oSbToken := CreateObject("Chilkat.StringBuilder")
oSbToken:Append("validityTimeMinutes:=10.0;timeCreated:=")
oSbToken:Append(cTimeCreated)

oCert := CreateObject("Chilkat.Cert")
nSuccess := oCert:LoadPfxFile("Some path to p12/p12file_name.p12", "Password_for_p12")
IF (nSuccess != 1)
    ? oCert:LastErrorText
    oDt:destroy()
    oSbToken:destroy()
    oCert:destroy()
    RETURN
ENDIF

oRsa := CreateObject("Chilkat.Rsa")
nSuccess := oRsa:SetX509Cert(oCert, 1)
IF (nSuccess != 1)
    ? oRsa:LastErrorText
    oDt:destroy()
    oSbToken:destroy()
    oCert:destroy()
    oRsa:destroy()
    RETURN
ENDIF

oRsa:EncodingMode := "base64url"

cSignature := oRsa:SignStringENC(oSbToken:GetAsString(), "sha256")
IF (oRsa:LastMethodSuccess == 0)
    ? oRsa:LastErrorText
    oDt:destroy()
    oSbToken:destroy()
    oCert:destroy()
    oRsa:destroy()
    RETURN
ENDIF

oSbToken:Append(";signature:=")
oSbToken:Append(cSignature)

//  Base64URL encode the result
oSbToken:Encode("base64url", "utf-8")
cToken := oSbToken:GetAsString()

? cToken

oDt:destroy()
oSbToken:destroy()
oCert:destroy()
oRsa:destroy()