Interface JwtParser

parse, validate and verify signature by public key

Example

import * as crypto from "crypto";

let parser = crypto.newJwtParser();
let [header, payload] = parser.parse(token, pk);
Copy

get PEM public key from jwks

Example

import * as crypto from "crypto";

let parser = crypto.newJwtParser();
let [header, payload] = parser.ParseWithoutVerify(token)
let url = payload['iss'] + '.well-known/jwks.json'
let resp = http.newClient().get(url)
let pub = parser.parsePublicKeyFromJwks(resp.body, kid)
Copy

parse, validate and verify by JWKS

Example

import * as crypto from "crypto";

let parser = crypto.newJwtParser();
let [header, payload] = parser.parseWithoutVerify(token)
let url = payload['iss'] + '.well-known/jwks.json'
let resp = http.newClient().get(url)
let [header, payload] = parser.parseWithJwks(token);
Copy

parse without valid and verify

Example

import * as crypto from "crypto";

let parser = crypto.newJwtParser();
let [header, payload] = parser.parseWithoutVerify(token);
Copy

verify signature by JWKS

Example

import * as crypto from "crypto";

let parser = crypto.newJwtParser();
let [header, payload] = parser.ParseWithoutVerify(token)
let url = payload['iss'] + '.well-known/jwks.json'
let resp = http.newClient().get(url)
if (!parser.verifyWithJwks(token, resp.body)) {
  throw new Error("invalid signature")
}
Copy