{"repo":"awslabs/aws-jwt-verify","free":true,"listed":false,"github":"https://github.com/awslabs/aws-jwt-verify","clone":"git clone https://github.com/awslabs/aws-jwt-verify.git","description":"JS library for verifying JWTs signed by Amazon Cognito, and any OIDC-compatible IDP that signs JWTs with RS256, RS384, RS512, ES256, ES384, ES512, Ed25519 and Ed448","language":"TypeScript","stars":745,"topics":["jwt","amplify","typescript","nodejs","amazon-cognito"],"license":"Apache-2.0","category":"auth-billing-email","readme_excerpt":"AWS JWT Verify JavaScript library for verifying JWTs signed by Amazon Cognito , Application Load Balancer , and any OIDC-compatible IDP . Installation npm install aws-jwt-verify This library can be used with Node.js 18 or higher. If used with TypeScript, TypeScript 4 or higher is required. This library can also be used in Web browsers. Basic usage Amazon Cognito See all verify parameters for Amazon Cognito JWTs here. Other IDPs See all verify parameters for JWTs from any IDP here. Non-standard IDPs To make special cases work, you can use lower level constructs directly: Application Load Balancer When the Application Load Balancer authentication feature at listener level is enabled, 2 JWTs tokens are forwarded via HTTP headers (see docs): - x-amzn-oidc-accesstoken : access token signed by Cognito or another IDP. This token can be verified with CognitoJwtVerifier (if signed by Cognito) or JwtVerifier (if signed by another IDP), see the examples above. - x-amzn-oidc-data : user claims JWT signed by the ALB. The user claims token can be verified with the AlbJwtVerifier : See all verify parameters for Amazon Application Load Balancer JWTs here. Philosophy of this library - Do one thing and do it well. Focus solely on verifying JWTs. - Pure TypeScript library that can be used in Node.js v18 and above (both CommonJS and ESM supported), as well in the modern evergreen Web browser. - Support both Amazon Cognito as well as any other OIDC-compatible IDP as first class citizen. - 0 runti","default_branch":null,"files":null,"tree":[],"storefront":"/r/awslabs","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/awslabs/aws-jwt-verify/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}