search

paulvanbladel / aurelia-auth

:key: Authentication plugin for aurelia
200 stars 74 forks source link

Use cryptojs to validate token payload #143

Open rquast opened 8 years ago

rquast commented 8 years ago

JWT tokens aren't validated.. should decrypt with public key (e.g. OpenID connect has a public JWKS for this).

An example of something similar to aurelia auth that has an implementation for this...

https://github.com/anvilresearch/connect-js/blob/master/anvil-connect.js#L540