在 vb.net 中处理 JWT 访问令牌请求

Question

我想获取JWT Access令牌用于Docuse，我尝试使用以下代码获取访问令牌，之后我通过访问令牌创建信封，我得到一个错误

“调用创建信封时出错： { ”错误代码“： ”AUTHORIZATION_INVALID_TOKEN“，”消息“：”提供的访问令牌已过期、已吊销或格式不正确。

Dim PrivateKey As String = "MIIEowIBAAKCAQEAjtTe7UUP/CBI9s...BLABLABLA...JfwZ2hHqFPXA9ecbhc0".Replace(vbLf, "").Replace(vbCr, "")
Dim ar1 As JObject = New JObject()
ar1.Add("typ", "JWT")
ar1.Add("alg", "RS256")
Dim header As String = Base64UrlEncoder.Encode(ar1.ToString)
Dim ar2 As JObject = New JObject()
ar2.Add("iss", "INTEGRATION_ID")
ar2.Add("sub", "GUID_VERSION_OF_USER_ID")
ar2.Add("iat", DateDiff(DateInterval.Second, New Date(1970, 1, 1), Now().ToUniversalTime))
ar2.Add("exp", DateDiff(DateInterval.Second, New Date(1970, 1, 1), DateAdd(DateInterval.Hour, 1,Now().ToUniversalTime)))
ar2.Add("aud", "account-d.docusign.com")
ar2.Add("scope", "signature")
Dim body As String = Base64UrlEncoder.Encode(ar2.ToString)
Dim stringToSign As String = header & "." & body
Dim bytesToSign() As Byte = Encoding.UTF8.GetBytes(stringToSign)
Dim keyBytes() As Byte = Convert.FromBase64String(PrivateKey)
Dim privKeyObj = Asn1Object.FromByteArray(keyBytes)
Dim privStruct = RsaPrivateKeyStructure.GetInstance(privKeyObj)
Dim sig As ISigner = SignerUtilities.GetSigner("SHA256withRSA")
sig.Init(True, New RsaKeyParameters(True, privStruct.Modulus, privStruct.PrivateExponent))
sig.BlockUpdate(bytesToSign, 0, bytesToSign.Length)
Dim signature() As Byte = sig.GenerateSignature()
Dim sign As String = Base64UrlEncoder.Encode(signature)
Return header & "." & body & "." & sign

我从这个链接DocuSign JWT访问令牌请求以上代码，在用户提到的工作代码，请告诉我我犯了什么错误，注意:我正在获取访问令牌，并立即通过该令牌创建信封。“iss”是我的集成密钥,“sub”是我的用户id和私人易科，从“我的应用程序”的RSA密钥对表单生成，该表单在“应用程序和集成密钥”中创建

我正在使用支持.net framework 4.6.1的docusing 3.0.0 dll

问候， 阿拉文德

Answer 1

如果你用的是DocuSign dll(3 . 0 . 0版本挺老的，建议你顺便升级一下)你不需要所有这些代码。相反，您可以这样做:(注意，我假设您有一个包含该信息的配置文件，您将需要更新该代码以包含ClientId/IK、UserId、AuthServer和RSA密钥位置)。

Public Sub UpdateUserFromJWT()
    Me._authToken = _apiClient.RequestJWTUserToken(Me._configuration("DocuSignJWT:ClientId"), Me._configuration("DocuSignJWT:ImpersonatedUserId"), Me._configuration("DocuSignJWT:AuthServer"), DSHelper.ReadFileContent(DSHelper.PrepareFullPrivateKeyFilePath(Me._configuration("DocuSignJWT:PrivateKeyFile"))), 1)
    _account = GetAccountInfo(_authToken)
    Me.User = New User With {
        .Name = _account.AccountName,
        .AccessToken = _authToken.access_token,
        .ExpireIn = DateTime.Now.AddSeconds(_authToken.expires_in.Value),
        .AccountId = _account.AccountId
    }
    Me.Session = New Session With {
        .AccountId = _account.AccountId,
        .AccountName = _account.AccountName,
        .BasePath = _account.BaseUri
    }
End Sub