cloudflare-worker-jwt
/
1.3.0
cloudflare-worker-jwt 1.3.0
Install from the command line:
Learn more about npm packages
$ npm install @tsndr/cloudflare-worker-jwt@1.3.0
Install via package.json:
"@tsndr/cloudflare-worker-jwt": "1.3.0"
About this version
A lightweight JWT implementation with ZERO dependencies for Cloudflare Workers.
npm i -D @tsndr/cloudflare-worker-jwt
async () => {
const jwt = require('@tsndr/cloudflare-worker-jwt')
// Creating a token
const token = await jwt.sign({ name: 'John Doe', email: '[email protected]' }, 'secret')
// Verifing token
const isValid = await jwt.verify(token, 'secret')
// Check for validity
if (!isValid)
return
// Decoding token
const payload = jwt.decode(token)
}async () => {
const jwt = require('@tsndr/cloudflare-worker-jwt')
// Creating a token
const token = await jwt.sign({
name: 'John Doe',
email: '[email protected]',
nbf: Math.floor(Date.now() / 1000) + (60 * 60), // Not before: Now + 1h
exp: Math.floor(Date.now() / 1000) + (2 * (60 * 60)) // Expires: Now + 2h
}, 'secret')
// Verifing token
const isValid = await jwt.verify(token, 'secret') // false
// Check for validity
if (!isValid)
return
// Decoding token
const payload = jwt.decode(token) // { name: 'John Doe', email: '[email protected]', ... }
}Signs a payload and returns the token.
| Argument | Type | Satus | Default | Description |
|---|---|---|---|---|
payload |
object |
required | - | The payload object. To use nbf (Not Before) and/or exp (Expiration Time) add nbf and/or exp to the payload. |
secret |
string |
required | - | A string which is used to sign the payload. |
options |
object, string
|
optional | { algorithm: 'HS256' } |
The options object supporting algorithm and keyid or just the algorithm string. (See Available Algorithms) |
Returns token as a string.
Verifies the integrity of the token and returns a boolean value.
| Argument | Type | Satus | Default | Description |
|---|---|---|---|---|
token |
string |
required | - | The token string generated by jwt.sign(). |
secret |
string |
required | - | The string which was used to sign the payload. |
algorithm |
object, string
|
optional | { algorithm: 'HS256', throwError: false } |
The options object supporting algorithm or just the algorithm string. (See Available Algorithms) |
Returns true if signature, nbf (if set) and exp (if set) are valid, otherwise returns false.
Returns the payload without verifying the integrity of the token. Please use jwt.verify() first to keep your application secure!
| Argument | Type | Satus | Default | Description |
|---|---|---|---|---|
token |
string |
required | - | The token string generated by jwt.sign(). |
Returns payload object.
- ES256
- ES384
- ES512
- HS256
- HS384
- HS512
- RS256
- RS384
- RS512
