# kms-jwt

> validate/decrypt/encrypt jwt with keys from aws kms

Latest version **1.0.2** (published 2018-01-04) · ISC license · 0 weekly downloads

## Install

```sh
npm install kms-jwt
pnpm add kms-jwt
yarn add kms-jwt
bun add kms-jwt
```

## Health

**Score 15/100 (F)** — status: abandoned.

Positive: no vulnerabilities.

Warnings: low downloads; no types; no esm support.

Negative: abandoned; low maintenance score.

## Facts

| | |
|---|---|
| Version | 1.0.2 |
| Published | 2018-01-04 |
| First published | 2017-03-02 |
| Weekly downloads | 0 |
| License | ISC |
| TypeScript types | none |
| Module format | CommonJS |
| Dependencies | 2 |
| Known vulnerabilities | 0 (+4 in 2 direct dependencies) |
| Install scripts | no |
| GitHub stars | 1 |
| Author | BombBomb |
| Maintainers | rob_ballou, bbouley, perlpunk |
| Keywords | aws-sdk, jsonwebtoken |

## Links

- npm: https://www.npmjs.com/package/kms-jwt
- Repository: https://github.com/bombbomb/kms-jwt
- Homepage: https://github.com/bombbomb/kms-jwt#readme
- Issues: https://github.com/bombbomb/kms-jwt/issues
- npm.io page: https://npm.io/package/kms-jwt

## Dependencies (2)

- [aws-sdk](https://npm.io/package/aws-sdk.md) ^2.22.0
- [jsonwebtoken](https://npm.io/package/jsonwebtoken.md) ^8.1.0

## Alternatives

- [@opentelemetry/exporter-zipkin](https://npm.io/package/@opentelemetry/exporter-zipkin.md) — 14.8M weekly downloads
- [pusher-js](https://npm.io/package/pusher-js.md) — 2.0M weekly downloads
- [browserify](https://npm.io/package/browserify.md) — 1.7M weekly downloads
- [sqs-consumer](https://npm.io/package/sqs-consumer.md) — 1.7M weekly downloads
- [@sanity/eventsource](https://npm.io/package/@sanity/eventsource.md) — 930.8K weekly downloads

## Recent versions

- 1.0.2 (latest) — 2018-01-04
- 1.0.1 — 2017-03-02
- 1.0.0 — 2017-03-02

## README

# kms-jwt

Use encrypted public and private keys through KMS to validate JWT signatures.

Usage:

        var publicJwt = new KmsJwt({
            awsConfig: {
                region: process.env.AWS_REGION,
                accessKeyId : process.env.AWS_ACCESS_KEY,
                secretAccessKey: process.env.AWS_SECRET_KEY
            },
            signingKey: signingKey
        });
        
        publicJwt.verify(jwt,function(err,decodedToken){
            if (err)
            {
                // handle invalid or expired token
            }
            else
            {
                // utilize decodedToken Payload
            }
        });
        
        
Create a Signing Key:

        var tokenSigner = new KmsJwt({
            awsConfig: {
                region: process.env.AWS_REGION,
                accessKeyId : process.env.AWS_ACCESS_KEY,
                secretAccessKey: process.env.AWS_SECRET_KEY
            },
            keyArn: kmsArn
        });

        tokenSigner.createSigningKey(publicOrPrivateKey,function(err,encryptedBase64EncodedKey){

            // store encryptedBase64EncodedKey where ever you want

        });

---
_Source: https://npm.io/package/kms-jwt · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._