check token

This project serves serverless methods or where process.env exists.

After encrypting the userId inside the webtoken use this method to verify that the sent userId matches the userId inside the sent webtoken. This way it will not be necessary to query an external api to validate if the token matches the userId.

It also has a method to decrypt and encrypt the token based on the secretWebToken variable which must exist in env as its secret string.

Methods

$3

``
const {encrypt} = require('check-token-from-serverless-env')
try{
let webtokenstring = encrypt({userId:"xpto", otherThing:234})
} catch(e){
//
}
`

$3

`
const {decrypt} = require('check-token-from-serverless-env')
exports.handler = async (event) => {
//get token from header or json body
const webtokenstring = event?.headers?.token || eventBody?.token
try{
let myObject = decrypt(webtokenstring);
//here supouse to have userId
let userId = myObject?.userId
} catch(e){
//
}
}
`

$3

`

const {checkTokenByUserId} = require('check-token-from-serverless-env')


exports.handler = async (event) => {
//get web token from header or json body
const webtokenstring = event?.headers?.token || eventBody?.token
//get userId from header or json body
const userId = event?.headers?.userId || eventBody?.userId
if(!checkTokenByUserId(webtokenstring, userId)){
return {
statusCode: 403,
body: JSON.stringify({ success: false, message:["wrong token or userId"] })
};
}
//...
}
`

| Remember: Use need to use your token like this

`
{
userId: 'foo',
...
}
`

$3

`

const {checkTokenByEvent} = require('check-token-from-serverless-env')


exports.handler = async (event) => {
//get web token, userId or user_id from event (body, header, path)
if(!checkTokenByEvent(event)){
return {
statusCode: 403,
body: JSON.stringify({ success: false, message:["wrong token or userId"] })
};
}
//...
}
``