FlowmageDocs

Verify JWT

Checks a token (JWT) is genuine and not expired, and hands back what is inside.

Settings

SettingWhat it is
TokenThe whole token — header.payload.signature, pasteable from a header or a webhook body.
AlgorithmThe algorithm the issuer signs with. A token that names another one is refused.
SecretRequiredNever printed, never logged — the token is never echoed either.
Technical details
KeyValue
jwtany JSONits `{{ }}` must give a string
algorithm"HS256" or "HS384" or "HS512", by default "HS256"
auth.secrettextwrite `{{ secret.NAME }}`, never the value

Output

What this node gives depends on the data it gets.

Sample output, and the expression for each field

Errors

When a step of this node stops a run, the run page shows a code. Look it up:

Example step

The step as a flow file holds it. Replace each value in <…>.

{
  "config": {
    "algorithm": "HS256",
    "auth": {
      "secret": "<secret>"
    },
    "jwt": "<token>"
  },
  "label": "Verify JWT",
  "type": "crypto.jwtVerify",
  "version": 1
}