bet-mcp

import { compactVerify } from '../jws/compact/verify.js'; import { validateClaimsSet } from '../lib/jwt_claims_set.js'; import { JWTInvalid } from '../util/errors.js'; export async function jwtVerify(jwt, key, options) { const verified = await compactVerify(jwt, key, options); if (verified.protectedHeader.crit?.includes('b64') && verified.protectedHeader.b64 === false) { throw new JWTInvalid('JWTs MUST NOT use unencoded payload'); } const payload = validateClaimsSet(verified.protectedHeader, verified.payload, options); const result = { payload, protectedHeader: verified.protectedHeader }; if (typeof key === 'function') { return { ...result, key: verified.key }; } return result; }