Cloudflare Worker JWT

A lightweight JWT implementation with ZERO dependencies for Cloudflare Workers.

Contents

• Install
• Usage
• Examples

Install

npm i @tsndr/cloudflare-worker-jwt

Usage

---

jwt.sign(payload, secret, [algorithm])

Signs a payload and returns the token.

Arguments

Argument	Type	Satus	Default	Description
payload	object	required	-	The payload object. To use nbf (Not Before) and/or exp (Expiration Time) add nbf and/or exp to the payload.
secret	string	required	-	A string which is used to sign the payload.
algorithm	string	optional	HS256	The algorithm used to sign the payload, possible values: HS256 or HS512

return

returns token as a string

---

jwt.verify(token, secret, [algorithm])

Verifies the integrity of the token and returns a boolean value.

Argument	Type	Satus	Default	Description
token	string	required	-	The token string generated by jwt.sign().
secret	string	required	-	The string which was used to sign the payload.
algorithm	string	optional	HS256	The algorithm used to sign the payload, possible values: HS256 or HS512

return

Returns true if signature, nbf (if set) and exp (if set) are valid, otherwise returns false.

---

jwt.decode(token)

Returns the payload without verifying the integrity of the token. Please use jwt.verify() first to keep your application secure!

Argument	Type	Satus	Default	Description
token	string	required	-	The token string generated by jwt.sign().

return

Returns payload object.

Examples

Basic Example

async () => {
    const jwt = require('@tsndr/cloudflare-worker-jwt')

    // Creating a token
    const token = await jwt.sign({ name: 'John Doe', email: 'john.doe@gmail.com' }, 'secret')

    // Verifing token
    const isValid = await jwt.verify(token, 'secret')

    // Decoding token
    const payload = jwt.decode(token)
}

Restrict Timeframe

async () => {
    const jwt = require('@tsndr/cloudflare-worker-jwt')

    // Creating a token
    const token = await jwt.sign({
        name: 'John Doe',
        email: 'john.doe@gmail.com',
        nbf: Math.floor(Date.now() / 1000) + (60 * 60),      // Not before: Now + 1h
        exp: Math.floor(Date.now() / 1000) + (2 * (60 * 60)) // Expires: Now + 2h
    }, 'secret')

    // Verifing token
    const isValid = await jwt.verify(token, 'secret') // false

    // Decoding token
    const payload = jwt.decode(token) // { name: 'John Doe', email: 'john.doe@gmail.com', ... }
}