Function verifyAuthJwt

lib/auth.ts:41–53

(key: CryptoKey, jwt: string)

}

export async function verifyAuthJwt<T = JwtData>(key: CryptoKey, jwt: string): Promise<T> {
  const jwtParts = jwt.split('.');
  if (jwtParts.length !== 3) {
    throw new Error('Malformed JWT');
  }

  const data = textToData(jwtParts[0] + '.' + jwtParts[1]);
  if (await crypto.subtle.verify({ name: 'HMAC' }, key, decodeBase64Url(jwtParts[2]), data) === true) {
    return JSON.parse(dataToText(decodeBase64Url(jwtParts[1]))) as T;
  }

  throw new Error('Invalid JWT');
}

export async function resolveCookieDomain(request: Request) {
  const config = await AppConfig.getConfig();