JWE Implementation

[paolo-rossi]

Hello,

I think it's better to create a discussion about JWE implementation in JOSE/JWT

@zaniniflz do you have also some demo on how to use your code?

Paolo.

[zaniniflz]

Hi Paolo,

I extended the TJOSE class to make JWE creation easier. See below:

Methods to encrypt and sign the token

class function SerializeCompact(APrivateKey, APublicKey: TJWK; AAlg, AEncryptionKeyAlg, AEncryptionContentAlg: TJOSEAlgorithmId; AToken: TJWT; ASkipValidation: Boolean): TJOSEBytes; overload;
class function SerializeCompact(APrivateKey, APublicKey: TJOSEBytes; AAlg, AEncryptionKeyAlg, AEncryptionContentAlg: TJOSEAlgorithmId; AToken: TJWT; ASkipValidation: Boolean): TJOSEBytes; overload;
class function SerializeCompact(APrivateKey, APublicKey: TJOSEBytes; AAlg, AEncryptionKeyAlg, AEncryptionContentAlg: TJOSEAlgorithmId; AToken: TJWT): TJOSEBytes; overload;

Methods to just encrypt the token

class function EncryptCompact(AKey: TJWK; AAlg: TJOSEAlgorithmId; AEncryptionAlg: TJOSEAlgorithmId; AToken: TJWT): TJOSEBytes;

Example

TJOSE.SerializeCompact(
    TJOSEBytes(Trim(PrivateKey)), // The private key
    TJOSEBytes(Trim(PublicKey)), The public key
    TJOSEAlgorithmId.RS384, The algorithm to sign the message
    TJOSEAlgorithmId.RSA1_5, The algorithm to encrypt the key
    TJOSEAlgorithmId.A256CBC_HS512, // The algorithm to encrypt the payload
    JWT, // The token to be encrypted (TJWT)
    False); // Skip sign validation

[djogray]

Hello @zaniniflz,
Might you forward the code of your extended class ? I need the function EncryptCompact.

[zaniniflz]

Sure, I'll create the PR once I have some free time.

[zaniniflz]

I just create the PR #84