idtoken-verifier - GitLite

KO | EN

gitlite — search

#hacktoberfest #ai #typescript #go #machine-learning #rust #macos #windows #cli #kubernetes #pytorch #security #mcp #open-source

idtoken-verifier

(★ 76)

Lightweight RSA JWT verification

File Explorer

Download Latest Version (.zip)

- - Bug Report.yml
  - config.yml
  - Feature Request.yml
- - codeql.yml
  - npm-release.yml
  - release.yml
  - semgrep.yml
  - snyk.yml
  - test.yml
- CODEOWNERS
- dependabot.yml
- PULL_REQUEST_TEMPLATE.md
- stale.yml
- - OpenSans-Bold-webfont.eot
  - OpenSans-Bold-webfont.svg
  - OpenSans-Bold-webfont.woff
  - OpenSans-BoldItalic-webfont.eot
  - OpenSans-BoldItalic-webfont.svg
  - OpenSans-BoldItalic-webfont.woff
  - OpenSans-Italic-webfont.eot
  - OpenSans-Italic-webfont.svg
  - OpenSans-Italic-webfont.woff
  - OpenSans-Light-webfont.eot
  - OpenSans-Light-webfont.svg
  - OpenSans-Light-webfont.woff
  - OpenSans-LightItalic-webfont.eot
  - OpenSans-LightItalic-webfont.svg
  - OpenSans-LightItalic-webfont.woff
  - OpenSans-Regular-webfont.eot
  - OpenSans-Regular-webfont.svg
  - OpenSans-Regular-webfont.woff
  - OpenSans-Semibold-webfont.eot
  - OpenSans-Semibold-webfont.svg
  - OpenSans-Semibold-webfont.ttf
  - OpenSans-Semibold-webfont.woff
  - OpenSans-SemiboldItalic-webfont.eot
  - OpenSans-SemiboldItalic-webfont.svg
  - OpenSans-SemiboldItalic-webfont.ttf
  - OpenSans-SemiboldItalic-webfont.woff
- - linenumber.js
- - jsdoc-default.css
  - prettify-jsdoc.css
  - prettify-tomorrow.css
- global.html
- IdTokenVerifier.html
- index.html
- index.js.html
- jsdocs.js
- print-bundle-size.js
- - base64.js
  - dummy-cache.js
  - error.js
  - jwks.js
  - rsa-verifier.js
- index.js
- telemetry.js
- - jwt.js
  - token-validation.js
- - async-cache.js
  - cache-mock.js
- base64.test.js
- jwks.test.js
- token-verification.test.js
- index.d.ts
.babelrc
.DS_Store
.gitignore
.jsdoc.json
.nycrc
.prettierrc
.semgrepignore
.shiprc
.version
CHANGELOG.md
codecov.yml
LICENSE
opslevel.yml
package-lock.json
package.json
README.md

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

![idtoken-verifier](https://cdn.auth0.com/website/sdks/banners/idtoken-verifier-banner.png)

A lightweight library to decode and verify RSA ID tokens meant for the browser.

[![Build Status][circleci-image]][circleci-url]
[![NPM version][npm-image]][npm-url]
[![Coverage][codecov-image]][codecov-url]
[![License][license-image]][license-url]
[![Downloads][downloads-image]][downloads-url]

:books: [Documentation](#documentation) - :rocket: [Getting Started](#getting-started) - :computer: [API Reference](#api-reference) - :speech_balloon: [Feedback](#feedback)

## Documentation

- [API Reference](https://auth0.github.io/idtoken-verifier)
- [Docs Site](https://auth0.com/docs) - explore our Docs site and learn more about Auth0

## Getting Started

### Installation

Using [npm](https://npmjs.org/) in your project directory run the following command:

```
npm install idtoken-verifier
```

### Verify an ID token

Import the library, create an instance of `IdTokenVerifier` and call the `verify` method to verify an ID token:

```js
import IdTokenVerifier from 'idtoken-verifier';

const verifier = new IdTokenVerifier({
  issuer: 'https://my.auth0.com/',
  audience: 'gYSNlU4YC4V1YPdqq8zPQcup6rJw1Mbt'
});

verifier.verify(id_token, nonce, (error, payload) => {
  if (error) {
    // handle the error
    return;
  }

// do something with `payload`
});
```

## API Reference

- [IdTokenVerifier constructor](https://auth0.github.io/idtoken-verifier/IdTokenVerifier.html)
- [verify](https://auth0.github.io/idtoken-verifier/global.html#verify)
- [decode](https://auth0.github.io/idtoken-verifier/global.html#decode)
- [validateAccessToken](https://auth0.github.io/idtoken-verifier/global.html#validateAccessToken)

## Feedback

### Contributing

We appreciate feedback and contribution to this repo! Before you get started, please see the following:

- [Auth0's general contribution guidelines](https://github.com/auth0/open-source-template/blob/master/GENERAL-CONTRIBUTING.md)
- [Auth0's code of conduct guidelines](https://github.com/auth0/open-source-template/blob/master/CODE-OF-CONDUCT.md)
- [The contribution guide](https://github.com/auth0/open-source-template/blob/master/GENERAL-CONTRIBUTING.md)

### Raise an issue

To provide feedback or report a bug, please [raise an issue on our issue tracker](https://github.com/auth0/idtoken-verifier/issues).

### Vulnerability Reporting

Please do not report security vulnerabilities on the public GitHub issue tracker. The [Responsible Disclosure Program](https://auth0.com/whitehat) details the procedure for disclosing security issues.

## What is Auth0?

<p align="center">
  <picture>
    <source media="(prefers-color-scheme: dark)" srcset="https://cdn.auth0.com/website/sdks/logos/auth0_dark_mode.png" width="150">
    <source media="(prefers-color-scheme: light)" srcset="https://cdn.auth0.com/website/sdks/logos/auth0_light_mode.png" width="150">
    <img alt="Auth0 Logo" src="https://cdn.auth0.com/website/sdks/logos/auth0_light_mode.png" width="150">
  </picture>
</p>
<p align="center">
  Auth0 is an easy to implement, adaptable authentication and authorization platform. To learn more checkout <a href="https://auth0.com/why-auth0">Why Auth0?</a>
</p>
<p align="center">
  This project is licensed under the Apache 2.0 license. See the <a href="./LICENSE"> LICENSE</a> file for more info.
</p>

[npm-image]: https://img.shields.io/npm/v/idtoken-verifier.svg?style=flat-square
[npm-url]: https://npmjs.org/package/idtoken-verifier
[circleci-image]: http://img.shields.io/circleci/project/github/auth0/idtoken-verifier.svg?branch=master&style=flat-square
[circleci-url]: https://circleci.com/gh/auth0/idtoken-verifier
[codecov-image]: https://img.shields.io/codecov/c/github/auth0/idtoken-verifier.svg?style=flat-square
[codecov-url]: https://codecov.io/github/auth0/idtoken-verifier?branch=master
[license-image]: http://img.shields.io/npm/l/idtoken-verifier.svg?style=flat-square
[license-url]: #license
[downloads-image]: http://img.shields.io/npm/dm/idtoken-verifier.svg?style=flat-square
[downloads-url]: https://npmjs.org/package/idtoken-verifier