JWKS Endpoint

JWKS URL

Also available at: https://tokens.testing.homebinder.com/.well-known/jwks.json (cached, CORS-enabled)

import { createRemoteJWKSet, jwtVerify } from "jose";

const JWKS_URL = "https://tokens.testing.homebinder.com/.well-known/jwks.json";
const jwks = createRemoteJWKSet(new URL(JWKS_URL));

// Configure for your environment and app:
const ACCEPTED_ISSUERS = ["https://sso.testing.homebinder.com", "https://tokens.testing.homebinder.com"];
const ACCEPTED_AUDIENCE = "https://api.homebinder.com"; // replace with your app's audience

export async function verifyToken(token) {
  const { payload } = await jwtVerify(token, jwks, {
    issuer: ACCEPTED_ISSUERS,
    audience: ACCEPTED_AUDIENCE,
  });
  return payload;
}

// Usage:
// const token = req.headers.authorization?.replace("Bearer ", "");
// const user = await verifyToken(token);
// console.log(user.sub, user.email, user.role);

npm install jose

Common Token Claims

Claims vary by token type. These are the standard fields you can expect: