Function replicatedClaimCheck

test/jwt/decrypt.test.ts:401–421

(t, claim)

}

async function replicatedClaimCheck(t, claim) {
  {
    const jwt = await new EncryptJWT({ [claim]: 'urn:example' })
      .setProtectedHeader({ alg: 'dir', enc: 'A256GCM', [claim]: 'urn:example' })
      .encrypt(t.context.secret)

    await t.notThrowsAsync(jwtDecrypt(jwt, t.context.secret))
  }
  {
    const jwt = await new EncryptJWT({ [claim]: 'urn:example:mismatched' })
      .setProtectedHeader({ alg: 'dir', enc: 'A256GCM', [claim]: 'urn:example' })
      .encrypt(t.context.secret)

    await t.throwsAsync(
      jwtDecrypt(jwt, t.context.secret, {
        code: 'ERR_JWT_CLAIM_VALIDATION_FAILED',
        message: `replicated "${claim}" claim header parameter mismatch`,
      }),
    )
  }
}
replicatedClaimCheck.title = (t, claim) => `${claim} header claim must match the payload`

for (const claim of ['iss', 'sub', 'aud']) {