Authentication

JWT

Name: AxilJS
Author: Tariq Mehmood

Token signing and verification with HMAC-SHA256.

1 min readDocumentationEdit this page

Setup#

typescript

import { JWT } from '@AxilJS/auth'
const jwt = new JWT(process.env.JWT_SECRET) // min 32 chars

typescript

const token = jwt.sign({ sub: String(user.id), role: 'admin' }, { expiresIn: '7d' })

typescript

const payload = jwt.verify(token)

1h, 7d, 30m, or seconds as number.

Warning

Signature comparison uses constant-time comparison to prevent timing attacks.