Function md_jws_hmac

modules/md/md_jws.c:112–148

}

apr_status_t md_jws_hmac(md_json_t **pmsg, apr_pool_t *p,
                         md_data_t *payload, md_json_t *prot_fields,
                         const md_data_t *hmac_key)
{
    md_json_t *msg, *jprotected;
    const char *prot64, *pay64, *mac64, *sign, *prot;
    md_data_t data;
    apr_status_t rv;

    msg = md_json_create(p);
    jprotected = md_json_clone(p, prot_fields);
    md_json_sets("HS256", jprotected, "alg", NULL);
    prot = md_json_writep(jprotected, p, MD_JSON_FMT_COMPACT);
    if (!prot) {
        rv = APR_EINVAL;
        md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, rv, p, "serialize protected");
        goto cleanup;
    }

    md_data_init(&data, prot, strlen(prot));
    prot64 = md_util_base64url_encode(&data, p);
    md_json_sets(prot64, msg, "protected", NULL);

    pay64 = md_util_base64url_encode(payload, p);
    md_json_sets(pay64, msg, "payload", NULL);
    sign = apr_psprintf(p, "%s.%s", prot64, pay64);

    rv = md_crypt_hmac64(&mac64, hmac_key, p, sign, strlen(sign));
    if (APR_SUCCESS != rv) {
        goto cleanup;
    }
    md_json_sets(mac64, msg, "signature", NULL);

cleanup:
    *pmsg = (APR_SUCCESS == rv)? msg : NULL;
    return rv;
}