npmpackage.info

Gathering detailed insights and metrics for express-jwt-jwks

Other packages similar to express-jwt-jwks

jose

5.9.6

JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes

@okta/jwt-verifier

4.0.1

Easily validate Okta access tokens

mock-jwks

3.2.2

A tool to mock a JWKS for development of microservices who consume jwts signed with RSA

fastify-jwt-jwks

2.0.0

JWT JWKS verification plugin for Fastify

Gathering detailed insights and metrics for express-jwt-jwks

express-jwt-jwks

Simple JWT auth using JWKS key sets for Express. Wraps express-jwt and jwks-rsa. AWS Cognito compatible.

1.0.0

MIT

JavaScript

13,923 1.7

Installations

npm install express-jwt-jwks

Pull Requests

Open

8

Total

12

Closed

4

Issues

Open

0

Total

0

Closed

0

Releases

Unable to fetch releases

Developer

rangle

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

Typescript Support

No

Node Version

11.6.0

NPM Version

6.7.0 Statistics

4 Stars

4 Commits

1 Forks

4 Watching

9 Branches

3 Contributors

Updated on 30 Jun 2022

Languages

JavaScript (100%)

Total Downloads

Cumulative downloads

Total Downloads

13,923

Last day

133.3%

Compared to previous day

Last week

96.6%

116

Compared to previous week

Last month

127.7%

394

Compared to previous month

Last year

61.2%

4,071

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

express-jwt jwks-rsa

Versions

express-jwt-jwks

Simple JWT auth using JWKS key sets for Express. Wraps express-jwt and jwks-rsa. AWS Cognito compatible.

Calls to JWKS are cached, and JWKS entries are associated to a JWT through the "kid" parameter in the JWT header. Calls through the cache to the remote JWKS are rate limited to 5 req/min.

Install

$ npm install express-jwt-jwks

Usage

The JWT authentication middleware authenticates callers using a JWT. If the token is valid, req.user will be set with the JSON object decoded to be used by later middleware for authorization and access control.

1
2
3
4// Obtain JWT auth middleware, using a remote JWKS key set
5var SECURE = require('express-jwt-jwks')({
6    jwks : "https://....../.well-known/jwks.json"
7});
8
9
10// Express routes, the first is JWT secured, the second is open.
11
12router.get('/restricted', SECURE, (_, res) => {
13  res.send("Super secret data")
14})
15
16router.get('/open', (_, res) => {
17  res.send("Anyone is allowed to see this")
18})
19
20
21

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

SAST

Determines if the project uses static code analysis.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

1.7

/10

Last Scanned on 2024-11-18

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More