# tokenpress
> A JWT utility belt for JavaScript applications
Latest version **2.3.0** (published 2020-01-04) · MIT license · 0 weekly downloads
## Install
```sh
npm install tokenpress
pnpm add tokenpress
yarn add tokenpress
bun add tokenpress
```
## Health
**Score 15/100 (F)** — status: abandoned.
Positive: no vulnerabilities.
Warnings: low downloads; no types; no esm support.
Negative: abandoned; low maintenance score.
## Facts
| | |
|---|---|
| Version | 2.3.0 |
| Published | 2020-01-04 |
| First published | 2017-04-08 |
| Weekly downloads | 0 |
| License | MIT |
| TypeScript types | none |
| Module format | CommonJS |
| Dependencies | 2 |
| Unpacked size | 18.4 KB |
| Known vulnerabilities | 0 (+3 in 1 direct dependencies) |
| Install scripts | no |
| GitHub stars | 0 |
| Author | Justin Sisley |
| Maintainers | justinsisley |
## Links
- npm: https://www.npmjs.com/package/tokenpress
- Repository: https://github.com/justinsisley/tokenpress
- Homepage: https://github.com/justinsisley/tokenpress#readme
- Issues: https://github.com/justinsisley/tokenpress/issues
- npm.io page: https://npm.io/package/tokenpress
## Dependencies (2)
- [jwks-rsa](https://npm.io/package/jwks-rsa.md) ^1.6.0
- [jsonwebtoken](https://npm.io/package/jsonwebtoken.md) ^8.5.1
## Recent versions
- 2.3.0 (latest) — 2020-01-04
- 2.2.0 — 2019-04-14
- 2.1.1 — 2019-04-13
- 2.1.0 — 2018-09-12
- 2.0.1 — 2018-08-05
- 2.0.0 — 2018-08-05
- 1.10.0 — 2018-05-27
- 1.9.1 — 2017-11-14
- 1.9.0 — 2017-11-14
- 1.8.0 — 2017-08-10
- 1.7.2 — 2017-06-29
- 1.7.1 — 2017-06-27
- 1.7.0 — 2017-06-26
- 1.6.1 — 2017-06-19
- 1.6.0 — 2017-05-27
- … 14 more at https://npm.io/package/tokenpress/versions
## README
tokenpress
A JWT utility belt for JavaScript applications
---
# Table of Contents
- [Features](#features)
- [Documentation](#documentation)
- [Installation](#installation)
- [Node.js](#nodejs)
- [Browser](#browser)
- [Contributing](#contributing)
- [Linting](#linting)
- [Testing](#testing)
- [Releases](https://github.com/justinsisley/tokenpress/blob/master/CHANGELOG.md)
- [Credits](#credits)
# Features
- __Convenient, universal utilities for handling JWTs__
- __JWTs generated by [node-jsonwebtoken](https://github.com/auth0/node-jsonwebtoken)__
- __Runs on Node.js v8+__
# Documentation
## Installation
```bash
npm install tokenpress
```
## Node.js
Configure tokenpress before using it:
```javascript
const tokenpress = require('tokenpress');
tokenpress.configure({
// Required: string or buffer containing the secret for HMAC algorithms
secret: 'CHANGE_THIS_SECRET',
// Required: string describing a time span zeit/ms. Eg: 60, "2 days", "10h", "7d"
expiresIn: '30 days',
// Optional: Minimum and maximum token lengths for getURLSafeToken utility
minTokenLength: 30,
maxTokenLength: 50,
});
```
Sign a token:
```javascript
const tokenpress = require('tokenpress');
const token = tokenpress.jwt.sign({
username: 'clever_username_ftw',
role: 'USER',
});
```
Verify a token using JWKS:
```javascript
const tokenpress = require('tokenpress');
tokenpress.configure({
algorithms: ['RS256'],
audience: 'my audience',
issuer: `https://my-app.com/`,
jwksUri: `https://my-app.com/jwks.json`,
});
const someToken = 'blah.blah.blah';
tokenpress.jwt.verifyWithJWKS(someToken).then((decodedJWT) => {
console.log(decodedJWT)
});
```
Use tokenpress middleware to require authentication for a route:
```javascript
const tokenpress = require('tokenpress');
const { requireAuth } = tokenpress.middleware;
router.get('/user/account', requireAuth, (req, res) => {
// req.jwt contains the decoded JWT
const { username, role } = req.jwt;
res.json({ username, role });
});
```
> Note: If the authentication check fails, a 401 (unauthorized) response will be sent as JSON. The response will contain an `error` property that will equal either `EXPIRED_TOKEN` or `INVALID_TOKEN`. `INVALID_TOKEN` can be caused by any of the conditions listed in the [jsonwebtoken docs](https://github.com/auth0/node-jsonwebtoken#jsonwebtokenerror).
Generate a random, variable-length, hexadecimal string using the crypto.randomBytes function. The minumum length defaults to 30, and the maximum length defaults to 50.
```javascript
const tokenpress = require('tokenpress');
const randomToken = tokenpress.utils.getURLSafeToken();
```
## Browser
Optionally configure whether to use sessionStorage as opposed to localStorage for storing tokens on the client. By default, localStorage will be used.
```javascript
import tokenpress from 'tokenpress/browser';
tokenpress.configure({
useSessionStorage: true,
});
```
Optionally configure the key used when saving to localStorage or sessionStorage. Defaults to `token`.
```javascript
import tokenpress from 'tokenpress/browser';
tokenpress.configure({
storageKey: 'custom-token-name',
});
```
Save a token to localStorage/sessionStorage:
```javascript
import tokenpress from 'tokenpress/browser';
mockFunctionToGetTokenFromServer().then((token) => {
tokenpress.save(token)
});
```
Retrieve a token from localStorage/sessionStorage:
```javascript
import tokenpress from 'tokenpress/browser';
const token = tokenpress.get();
```
Delete a token from localStorage/sessionStorage:
```javascript
import tokenpress from 'tokenpress/browser';
tokenpress.delete();
```
Determine if a token is expired:
```javascript
import tokenpress from 'tokenpress/browser';
// Will fetch token from localStorage/sessionStorage by default
const isTokenExpired = tokenpress.isExpired();
console.log(isTokenExpired); // true or false
// Or, check a token you've previously retrieved
const token = tokenpress.get();
const isMyOtherTokenExpired = tokenpress.isExpired(token);
console.log(isMyOtherTokenExpired); // true or false
```
# Contributing
## Linting
Run ESLint with `npm run lint`.
## Testing
Run unit tests with `npm test`.
# Credits
---
_Source: https://npm.io/package/tokenpress · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._