Dan6erbond / sk-auth

Authentication library for use with SvelteKit featuring built-in OAuth providers and zero restriction customization!
MIT License
578 stars 70 forks source link

Verify oauth token? #87

Closed mobilars closed 2 years ago

mobilars commented 2 years ago

Hi. Does this library verify the OAuth JWT tokens for me (towards a standard keycloak oauth server) or do I need to do that myself? Verification of the issuer, signature of the JWT etc.

Best regards, Lars

Dan6erbond commented 2 years ago

Hey, thanks for the question! Currently this library doesn't handle much more than the token exchange from the OAuth2 provider to the server. If you want to verify the token, you can use the callbacks to do so.

Hope this helps!