@philiprehberger/jwt-decode-ts
v0.1.3460 downloadsMIT
Decode and inspect JWTs — no verification, typed payload, tiny
$
npm install @philiprehberger/jwt-decode-tsREADME
@philiprehberger/jwt-decode-ts
Decode and inspect JWTs — no verification, typed payload, tiny
Note: This library does not verify JWT signatures. It only decodes and inspects token contents. Always verify tokens server-side before trusting their claims.
Installation
npm install @philiprehberger/jwt-decode-ts
Usage
import {
decodeJwt,
decodePayload,
isExpired,
expiresIn,
expiresAt,
isJwt,
} from '@philiprehberger/jwt-decode-ts';
// Decode a full JWT
const { header, payload, signature } = decodeJwt(token);
// Extract just the payload
const claims = decodePayload(token);
// Check expiry
if (isExpired(token)) {
console.log('Token has expired');
}
// Milliseconds until expiry (negative if already expired)
const ms = expiresIn(token);
// Get expiry as a Date
const date = expiresAt(token);
// Validate JWT format (type guard)
if (isJwt(unknownValue)) {
const decoded = decodeJwt(unknownValue);
}
API
| Function | Description |
|---|---|
decodeJwt<T>(token) | Decode a JWT into { header, payload, signature } |
decodePayload<T>(token) | Decode and return only the payload |
isExpired(token, clockTolerance?) | Check if the token's exp claim is in the past |
expiresIn(token) | Milliseconds until expiry (negative if expired). Throws if no exp |
expiresAt(token) | Date from the exp claim. Throws if no exp |
isJwt(value) | Type guard — validates string has 3 non-empty base64url parts |
InvalidTokenError | Custom error thrown for malformed tokens |
Development
npm install
npm run build
npm run typecheck
npm test
Support
If you find this project useful: