in src/cognito-verifier.ts [347:368]
public async verify<T extends SpecificVerifyProperties>(
...[jwt, properties]: CognitoVerifyParameters<SpecificVerifyProperties>
): Promise<CognitoIdOrAccessTokenPayload<IssuerConfig, T>> {
const { decomposedJwt, jwksUri, verifyProperties } =
this.getVerifyParameters(jwt, properties);
await this.verifyDecomposedJwt(decomposedJwt, jwksUri, verifyProperties);
try {
validateCognitoJwtFields(decomposedJwt.payload, verifyProperties);
} catch (err) {
if (
verifyProperties.includeRawJwtInErrors &&
err instanceof JwtInvalidClaimError
) {
throw err.withRawJwt(decomposedJwt);
}
throw err;
}
return decomposedJwt.payload as CognitoIdOrAccessTokenPayload<
IssuerConfig,
T
>;
}