jwtr.invalidate(token)Returns true if token was successfully stored in redis. `token` is the JsonWebToken string ```js const JWTR = require('jwtr') const jwtr = JWTR.createJWTR({ prefix: 'token_' }) const token = JWTR.sign({ foo: 'bar' }, 'secret', { expiresIn: '1h' }) const result = await jwtr.invalidate(token) // true ```
jwtr.validate(token, secretOrPublicKey, [options, callback])(Asynchronous) If a callback is supplied, function acts asynchronously. The callback is called with the decoded payload if the signature is valid and optional expiration, audience, or issuer are valid. If not, it will be called with the error. (Synchronous) If a callback is not supplied, function acts synchronously. Returns the payload decoded if the signature is valid and optional expiration, audience, or issuer are valid. If not, it will throw the error. `token` is the JsonWebToken string `secretOrPublicKey` is a string or buffer containing either the secret for HMAC algorithms, or the PEM encoded public key for RSA and ECDSA. `options` * `algorithms`: List of strings with the names of the allowed algorithms. For instance, `["HS256", "HS384"]`. * `audience`: if you want to check audience (`aud`), provide a value here. The audience can be checked against a string, a regular expression or a list of strings and/or regular expressions. > Eg: `"urn:foo"`, `/urn:f[o]{2}/`, `[/urn:f[o]{2}/, "urn:bar"]` * `issuer` (optional): string or array of strings of valid values for the `iss` field. * `ignoreExpiration`: if `true` do not validate the expiration of the token. * `ignoreNotBefore`... * `subject`: if you want to check subject (`sub`), provide a value here * `clockTolerance`: number of seconds to tolerate when checking the `nbf` and `exp` claims, to deal with small clock differences among different servers * `maxAge`: the maximum allowed age for tokens to still be valid. It is expressed in seconds or a string describing a time span [zeit/ms](https://github.com/zeit/ms). > Eg: `1000`, `"2 days"`, `"10h"`, `"7d"`. A numeric value is interpreted as a seconds count. If you use a string be sure you provide the time units (days, hours, etc), otherwise milliseconds unit is used by default (`"120"` is equal to `"120ms"`). * `clockTimestamp`: the time in seconds that should be used as the current time for all necessary comparisons. * `nonce`: if you want to check `nonce` claim, provide a string value here. It is used on Open ID for the ID Tokens. ([Open ID implementation notes](https://openid.net/specs/openid-connect-core-1_0.html#NonceNotes)) > jwtr.validate and jwt.verify is the same, but also validate's method checks redis's store for invalid tokens. ```js const JWTR = require('jwtr') const jwtr = JWTR.createJWTR({ prefix: 'token_' }) const token = JWTR.sign({ foo: 'bar' }, 'secret', { expiresIn: '1h' }) const decoded = await jwtr.validate(token, 'secret', { algorithms: ['HS256'] }) ```
jwtr.refresh(tokens, secretOrPrivateKey, [options])Returns new access and refresh tokens beforehand making old tokens not valid. `tokens`: * `accessToken` is the JsonWebToken string * `refreshToken` is the JsonWebToken string `secretOrPrivateKey` is a string, buffer, or object containing either the secret for HMAC algorithms or the PEM encoded private key for RSA and ECDSA. In case of a private key with passphrase an object `{ key, passphrase }` can be used (based on [crypto documentation](https://nodejs.org/api/crypto.html#crypto_sign_sign_private_key_output_format)), in this case be sure you pass the `algorithm` option. `options`: * `access_payload` (optional) could be an object literal, buffer or string representing valid JSON. * `refresh_payload` (optional) could be an object literal, buffer or string representing valid JSON. * `access_options` (optional): * `algorithm` (default: `HS256`) * `expiresIn`: expressed in seconds or a string describing a time span [zeit/ms](https://github.com/zeit/ms). > Eg: `60`, `"2 days"`, `"10h"`, `"7d"`. A numeric value is interpreted as a seconds count. If you use a string be sure you provide the time units (days, hours, etc), otherwise milliseconds unit is used by default (`"120"` is equal to `"120ms"`). * `notBefore`: expressed in seconds or a string describing a time span [zeit/ms](https://github.com/zeit/ms). > Eg: `60`, `"2 days"`, `"10h"`, `"7d"`. A numeric value is interpreted as a seconds count. If you use a string be sure you provide the time units (days, hours, etc), otherwise milliseconds unit is used by default (`"120"` is equal to `"120ms"`). * `audience` * `issuer` * `jwtid` * `subject` * `noTimestamp` * `header` * `keyid` * `mutatePayload`: if true, the sign function will modify the payload object directly. This is useful if you need a raw reference to the payload after claims have been applied to it but before it has been encoded into a token. * `refresh_options` (optional) * `algorithm` (default: `HS256`) * `expiresIn`: expressed in seconds or a string describing a time span [zeit/ms](https://github.com/zeit/ms). > Eg: `60`, `"2 days"`, `"10h"`, `"7d"`. A numeric value is interpreted as a seconds count. If you use a string be sure you provide the time units (days, hours, etc), otherwise milliseconds unit is used by default (`"120"` is equal to `"120ms"`). * `notBefore`: expressed in seconds or a string describing a time span [zeit/ms](https://github.com/zeit/ms). > Eg: `60`, `"2 days"`, `"10h"`, `"7d"`. A numeric value is interpreted as a seconds count. If you use a string be sure you provide the time units (days, hours, etc), otherwise milliseconds unit is used by default (`"120"` is equal to `"120ms"`). * `audience` * `issuer` * `jwtid` * `subject` * `noTimestamp` * `header` * `keyid` * `mutatePayload`: if true, the sign function will modify the payload object directly. This is useful if you need a raw reference to the payload after claims have been applied to it but before it has been encoded into a token. ```js const JWTR = require('jwtr') const jwtr = JWTR.createJWTR({ prefix: 'token_' }) const accessToken = JWTR.sign({ foo: 'bar' }, 'secret', { expiresIn: '15m' }) const refreshToken = JWTR.sign({ foo: 'bar' }, 'secret', { expiresIn: '2h' }) let { access_token, refresh_token } = await jwtr.refresh( { accessToken, refreshToken }, 'secret', { access_payload: { foo: 'bar' }, refresh_payload: { foo: 'bar' } } ) ```
jwtr.clear()Clear all expired tokens from redis. ```js const JWTR = require('jwtr') const jwtr = JWTR.createJWTR({ prefix: 'token_' }) await jwtr.clear() ```
jwtr.clearAll()Clear all tokens from redis. ```js const JWTR = require('jwtr') const jwtr = JWTR.createJWTR({ prefix: 'token_' }) await jwtr.clearAll() ```
jwtr.set(key, obj)Set object by key in redis. ```js const JWTR = require('jwtr') const jwtr = JWTR.createJWTR({ prefix: 'token_' }) await jwtr.set('token', { foo: 'bar'}) ```
jwtr.get(key)Get object by key from redis. ```js const JWTR = require('jwtr') const jwtr = JWTR.createJWTR({ prefix: 'token_' }) await jwtr.get('token') ```
jwtr.keys(callback)Method provides access to keys from redis and performs callback with keys. ```js const JWTR = require('jwtr') const jwtr = JWTR.createJWTR({ prefix: 'token_' }) await jwtr.keys(keys => { console.log(keys) }) ```
jwtr.forEachKey(callback)Method executes a provided function once for each array of the keys item. ```js const JWTR = require('jwtr') const jwtr = JWTR.createJWTR({ prefix: 'token_' }) await jwtr.forEachKey(key => { console.log(key) }) ```
jwtr.flush()Delete all the keys. [See more details](https://redis.io/commands/flushdb). ```js const JWTR = require('jwtr') const jwtr = JWTR.createJWTR({ prefix: 'token_' }) await jwtr.flush() ```