Twilio Flex Token Validator

Flex JWE Token Validator provides an easy way to validate a Flex JWE token.

Usage

Install with npm install twilio-flex-token-validator.

You can use this validator either within a Twilio Function, or into any NodeJS application.

Using in Twilio Function

First visit Twilio Function Configuration and add twilio-flex-token-validator as an NPM package. On the same page, enable the checkbox Enable ACCOUNT_SID and AUTH_TOKEN.

In your Twilio Function, wrap your main handler with this validator:

1const TokenValidator = require('twilio-flex-token-validator').functionValidator;
2
3exports.handler = TokenValidator(function(context, event, callback) {
4    // Your normal Twilio Function goes here.
5    // This block will only be called if your token is validated, otherwise it returns a 403.
6});

This validator assumes that the token is provided as the Token key. The successful result of the token validation is added to event.TokenResult.

Make sure the checkbox Check for valid Twilio signature is disabled. This token validator will handle the authentication of the request instead.

Using in any NodeJS application

You can also use this validator inside any existing Node servers:

1const TokenValidator = require('twilio-flex-token-validator').validator;
2
3TokenValidator(token, accountSid, authToken)
4    .then(tokenResult => {
5      // validated
6    })
7    .catch(err => {
8      // validation failed
9    });

Token Result

The validated token result will contain the following data:

1{
2  "valid": true,
3  "code": 0,
4  "message": null,
5  "expiration": "2018-09-24T23:22:44.240Z",
6  "realm_user_id": "user@example.com",
7  "identity": "user_40example_2Dcom",
8  "roles":[
9    "agent"
10  ],
11  "worker_sid": "WKxxx"
12}

Contributing

Check out CONTRIBUTING for more information on how to contribute to this project.

License

Twilio Flex Token Validator is licensed under MIT.