azure-ad-verify-token
Advanced tools
Verify JWT issued by Azure Active Directory B2C.
npm install azure-ad-verify-token --save
import { verify, VerifyConfig } from 'azure-ad-verify-token';
const config: VerifyConfig = {
jwksUri: 'https://contoso.b2clogin.com/contoso.onmicrosoft.com/discovery/v2.0/keys?p=b2c_1_signupsignin1',
issuer: 'https://contoso.b2clogin.com/3285c484-dce5-4abb-a341-bbe4f2bc8554/v2.0/',
audience: '99d1275c-e805-483f-b832-600f8130829c'
};
verify(token, config)
.then(decoded => {
// verified and decoded token
console.log(decoded);
})
.catch(error => {
// invalid token
console.error(decoded);
});
Configuration options:
| Property | Type | Description |
|---|---|---|
jwksUri | string | jwk_uri value obtained from B2C policy metadata endpoint. |
issuer | string | issuer value obtained from B2C policy metadata endpoint. |
audience | string | Application ID of the application accessing the tenant. |
Example metadata endpoints:
npm install
npm run build
FAQs
Verify JWT issued by Azure Active Directory B2C.
The npm package azure-ad-verify-token receives a total of 4,093 weekly downloads. As such, azure-ad-verify-token popularity was classified as popular.
We found that azure-ad-verify-token demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.
Security News
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.