in verify-jwt/index.js [86:113]
function handler(event) {
var request = event.request;
//Secret key used to verify JWT token.
//Update with your own key.
var key = "LzdWGpAToQ1DqYuzHxE6YOqi7G3X2yvNBot9mCXfx5k";
// If no JWT token, then generate HTTP redirect 401 response.
if(!request.querystring.jwt) {
console.log("Error: No JWT in the querystring");
return response401;
}
var jwtToken = request.querystring.jwt.value;
try{
jwt_decode(jwtToken, key);
}
catch(e) {
console.log(e);
return response401;
}
//Remove the JWT from the query string if valid and return.
delete request.querystring.jwt;
console.log("Valid JWT token");
return request;
}