Installations

npm install @perlboy/cfworker-jwt

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Node Version

16.14.2

NPM Version

8.5.0 Score

71

Supply Chain

75.1

Quality

75.5

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

3

Total

248

Closed

22

Merged

223

Issues

Open

14

Total

66

Closed

52

Releases

158

@cfworker/web@5.0.5

Published on 14 Dec 2024

@cfworker/web@5.0.4

Published on 14 Dec 2024

@cfworker/json-schema@4.0.3

Published on 10 Dec 2024

@cfworker/web@5.0.3

Published on 10 Dec 2024

@cfworker/uuid@4.0.3

Published on 10 Dec 2024

@cfworker/jwt@7.0.3

Published on 10 Dec 2024

View all 158 releases

Contributors

20

View all 20 contributors

Languages

2

TypeScript

JavaScript

TypeScript (83.39%)

JavaScript (16.61%)

Developer

cfworker

Download Statistics

Total Downloads

1,175

Last Day

1

Last Week

2

Last Month

12

Last Year

161

GitHub Statistics

633 Stars

424 Commits

57 Forks

9 Watching

13 Branches

20 Contributors

Bundle Size

6.52 kB

Minified

2.42 kB

Minified + Gzipped

Bundlephobia

Maintainers

1

Package Meta Information

Latest Version

3.0.8

Package Id

@perlboy/cfworker-jwt@3.0.8

Unpacked Size

27.96 kB

Size

6.43 kB

File Count

30

NPM Version

8.5.0

Node Version

16.14.2

Total Downloads

Cumulative downloads

Total Downloads

1,175

Last day

0%

1

Compared to previous day

Last week

0%

2

Compared to previous week

Last month

9.1%

12

Compared to previous month

Last year

-54.5%

161

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

3

@cfworker/worker-types @cloudflare/workers-types rfc4648

Dev Dependencies

6

@cfworker/dev @types/chai @types/mocha chai mocha typescript

Versions

cfworker/jwt

Tiny lib for decoding JWTs and verifying signatures, using native crypto APIs.

Currently supports RS256, RS384, and RS512.

1const jwt = request.headers.get('Authorization');
2const issuer = '...'; // Auth0 origin.
3const audience = '...'; // Auth0 client id.
4
5const result = await parseJwt(jwt, issuer, audience);
6if (!result.valid) {
7  console.log(result.reason); // Invalid issuer/audience, expired, etc
8} else {
9  console.log(result.payload); // { iss, sub, aud, iat, exp, ...claims }
10}

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

9

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

5

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

5.2

/10

Last Scanned on 2024-12-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More