Merge pull request #155 from JoinColony/fix/check-jwt-sig

Verify JWT Signature
JoinColony · Oct 30, 2024 · 97d25c0 · 97d25c0
2 parents c97fd60 + b5f31ce
commit 97d25c0
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/auth.ts b/src/auth.ts
@@ -29,5 +29,12 @@ export const getAddressFromToken = (token: string) => {
     throw new Error('Authentication token expired')
   }
 
+  // Verify the JWT signature
+  JWT.verify(token, JWT_KEY, {
+    algorithms: ['HS256'],
+    audience: 'https://api.colony.io',
+    issuer: 'https://colony.io',
+  })
+
   return address
 }