Loading TOC...

xdmp.jwtValidate

xdmp.jwtValidate(
   JWT as String,
   alg as String,
   secret as String
) as Boolean

Summary

Validates the signature of a JWT. Note that if the token has an invalid signature or format, this function will return false without any additional logging. Please make sure that the inputted JWT is properly formatted.

Parameters
JWT JWT that is to be validated.
alg Signature algorithm used for the JWT.
secret Secret used to decrypt JWT signature. The secret must be base64url or hex-encoded.

Example

'use strict';

xdmp.jwtValidate("eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.5mhBHqs5_DTLdINd9p5m7ZJ6XD0Xc55kIaCRY5r6HRA", 
                  "HS256", 
                  "74657374")

=> true

Stack Overflow iconStack Overflow: Get the most useful answers to questions from the MarkLogic community, or ask your own question.