Skip to content

Makes it easy to generate and verify messages which are signed to prevent tampering

Notifications You must be signed in to change notification settings

trekjs/message-verifier

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

message-verifier

Makes it easy to generate and verify messages which are signed to prevent tampering.

This is useful for cases like remember-me tokens and auto-unsubscribe links where the session store isn't suitable or available.

NPM version Build status Test coverage License Dependency status

Usage

import MessageVerifier from 'message-verifier';

let secret = `Hey, I'm a secret!`;
let verifier = new MessageVerifier(secret, options);

// Generate token:
let token = verifier.generate([user.id, twoWeeksFromNow])

// In the authentication filter:
let [id, time] = verifier.verify(token);
if (time < Date.now()) {
  let user = User.find(id);
}

License

MIT

About

Makes it easy to generate and verify messages which are signed to prevent tampering

Resources

Stars

Watchers

Forks

Packages