Socket
Socket
Sign inDemoInstall

express-jwt

Package Overview
Dependencies
16
Maintainers
55
Versions
70
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

Comparing version 7.5.2 to 7.6.0

2

dist/index.d.ts

@@ -5,2 +5,4 @@ import * as jwt from 'jsonwebtoken';

export declare type GetVerificationKey = (req: express.Request, token: jwt.Jwt | undefined) => jwt.Secret | Promise<jwt.Secret>;
export declare type SecretCallback = GetVerificationKey;
export declare type SecretCallbackLong = GetVerificationKey;
export declare type IsRevoked = (req: express.Request, token: jwt.Jwt | undefined) => boolean | Promise<boolean>;

@@ -7,0 +9,0 @@ export declare type TokenGetter = (req: express.Request) => string | Promise<string> | undefined;

2

package.json
{
"name": "express-jwt",
"version": "7.5.2",
"version": "7.6.0",
"description": "JWT authentication middleware.",

@@ -5,0 +5,0 @@ "keywords": [

@@ -257,2 +257,23 @@ # express-jwt

If you use `credentialsRequired: false` then use `ExpressJwtRequestUnrequired`. This type defines `req.auth` as optional, example:
```typescript
import { expressjwt, ExpressJwtRequest } from "express-jwt";
app.get(
"/protected",
expressjwt({
secret: "shhhhhhared-secret",
algorithms: ["HS256"],
credentialsRequired: false,
}),
function (req: ExpressJwtRequestUnrequired, res: express.Response) {
if (!req.auth?.admin) {
return res.sendStatus(401);
}
res.sendStatus(200);
}
);
```
## Migration from v6

@@ -259,0 +280,0 @@

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc