Encrypted Payloads (JWE)

npm install jose

import { importJWK, CompactEncrypt } from 'jose';

const API_BASE = 'https://api.autosend.com';
const API_KEY = 'AS_xxx.yyy'; // your AutoSend API key

const JWE_ALG = 'RSA-OAEP-256';
const JWE_ENC = 'A256GCM';

// 1. Fetch AutoSend's public key from the JWKS endpoint.
async function fetchPublicKey() {
	const res = await fetch(`${API_BASE}/v1/jwks.json`);
	if (!res.ok) throw new Error(`Failed to fetch JWKS: ${res.status}`);

	const { keys } = await res.json();
	const jwk = keys[0]; // the active key is listed first

	const publicKey = await importJWK(jwk, JWE_ALG);
	return { publicKey, kid: jwk.kid };
}

// 2. Encrypt the JSON payload into a JWE compact string.
async function encryptPayload(payload, publicKey, kid) {
	const data = new TextEncoder().encode(JSON.stringify(payload));
	return new CompactEncrypt(data)
		.setProtectedHeader({ alg: JWE_ALG, enc: JWE_ENC, kid })
		.encrypt(publicKey);
}

// 3. Send the encrypted request to the contacts API.
async function createEncryptedContact(contact) {
	const { publicKey, kid } = await fetchPublicKey();
	const encryptedData = await encryptPayload(contact, publicKey, kid);

	const res = await fetch(`${API_BASE}/v1/contacts/email`, {
		method: 'POST',
		headers: {
			'Content-Type': 'application/json',
			Authorization: `Bearer ${API_KEY}`,
			'X-Payload-Encryption': 'jwe',
			'X-Key-Id': kid,
		},
		body: JSON.stringify({ encryptedData }),
	});

	return res.json();
}

// Usage
const result = await createEncryptedContact({
	email: '[email protected]',
	firstName: 'John',
	lastName: 'Doe',
	contactProperties: {
		isVerified: false,
		industry: 'Telecommunications',
	},
});

console.log(result);

POST /v1/contacts/email
Authorization: Bearer AS_xxx.yyy
Content-Type: application/json
X-Payload-Encryption: jwe
X-Key-Id: key_2026_06

{ "encryptedData": "eyJhbGciOiJSU0EtT0FFUC0yNTYi..." }

POST /v1/contacts/email
Authorization: Bearer AS_xxx.yyy
Content-Type: application/json

{ "email": "[email protected]", "firstName": "John" }