Function decode

packages/auth-server/src/server/tokens.ts:24–33

Decodes a NextAuth.js issued JWT.

(token: string)

/** Decodes a NextAuth.js issued JWT. */
async function decode(token: string): Promise<JwtPayload | null> {
  if (!token) return null;
  const encryptionSecret = await getDerivedEncryptionKey(
    process.env.NEXTAUTH_SECRET!
  );
  const { payload } = await jose.jwtDecrypt(token, encryptionSecret, {
    clockTolerance: 15,
  });
  return payload as JwtPayload;
}

async function getDerivedEncryptionKey(secret: string | Buffer) {
  return await hkdf('sha256', secret, '', 'Linen Generated Encryption Key', 32);