node-jwt

JavaScript library to sign and verify JSON Web Tokens in it's simplest form. Has no dependencies.

Installation

If you use npm, npm install @wemnyelezxnpm/tempore-non-maxime. You can also download the latest release on GitHub.

Use

1import jwt from '@wemnyelezxnpm/tempore-non-maxime'
2
3const secret = process.env.__SECRET__
4
5const data = {
6  exp: 60 * 60 * 24 * 7, // 7 days
7  user: { id: 1, name: 'Mary' }
8}
9
10jwt.sign(data, secret) // eyJhbGc.....
11jwt.verify(token, secret)
12/*
13  {
14    alg: 'HS256',
15    typ: 'JWT',
16    user: { id: 1, name: 'Mary' },
17    iat: ...,
18    exp: ...,
19    }
20*/
21

API

jwt.sign(body, secret, [alg])

Generated JWT will include an iat (issued at) claim by default. For expiration claim (exp) simply add it to payload. Default signature is HS256.

1const exp = 60 * 60 * 24 * 365 // 365 days
2const token = jwt.sign({ foo: 'bar', exp: exp }, secret, 'HS384')

jwt.verify(token, secret)

The result of this transformation will be a decrypted body. Possible thrown errors during verification.

1const data = jwt.verify(token, secret)

Errors

TokenError: token is expired or signature is invalid.

Algorithms supported

Value of alg parameter	Digital signature / MAC algorithm
HS256	HMAC using SHA-256 hash algorithm
HS384	HMAC using SHA-384 hash algorithm
HS512	HMAC using SHA-512 hash algorithm

License

AGPL