#node-jwt

JavaScript library to sign and verify JSON Web Tokens in it's simplest form. Has no dependencies.

#Installation

If you use npm, npm install @onelastjedi/node-jwt. You can also download the latest release on GitHub.

#Use

import jwt from '@onelastjedi/node-jwt'

const secret = process.env.__SECRET__

const data = {
  exp: Math.floor(Date.now() / 1000) + 60 * 60,
  user: { id: 1, name: 'Mary' }
}

jwt.sign(data, secret) // eyJhbGc.....
jwt.verify(token, secret)
/*
  {
    alg: 'HS256',
    typ: 'JWT',
    user: { id: 1, name: 'Mary' },
    iat: ...,
    exp: ...,
    }
*/

#API

#jwt.sign(body, secret, [alg])

Generated JWT will include an iat (issued at) claim by default. For expiration claim (exp) simply add it to payload. Default signature is HS256.

const exp = Math.floor(Date.now() / 1000) + 60
const token = jwt.sign({ foo: 'bar', exp: exp }, secret, 'HS384')

#jwt.verify(token, secret)

The result of this transformation will be a decrypted body. Possible thrown errors during verification.

const data = jwt.verify(token, secret)

#Errors

TokenExpiredError: if the token is expired.

SignatureInvalidError: if the signature is invalid.

#Algorithms supported

#License

AGPL