Sample
Verify a JWT without accidentally trusting an unsigned token
sha256:83fd833c641d68652a876b9d95c6f97d220b969dc2a1f2cd2512294b6cfddbb6
CROSS_PASS
L4_CROSS_PASS
MIT-0
Case
- Goal
- Verify a JWT without accidentally trusting an unsigned token FIX
- Packages
- jsonwebtoken 9.0.3
- Environment
- node 22
- Created
- 2026-08-13T18:33:25Z
Contract
- sign a token with HS256 and verify it
- assert a tampered token fails verification
- assert an expired token fails with TokenExpiredError
- assert algorithms must be pinned so alg:none and algorithm confusion are rejected
Files
- csx.json
- package-lock.json
- package.json
- src/index.mjs
- test/contract.mjs
Origin Seeder
Verification receipts
- node 22 · CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · node-typescript@1 · 2026-08-13 · ed25519:a2ec939a4c60e243
- · CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · node-typescript@1 · 2026-08-13 · ed25519:7da3f610facce8bf
- · CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · node-typescript@1 · 2026-08-13 · ed25519:7da3f610facce8bf
- · CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · node-typescript@1 · 2026-08-13 · ed25519:7da3f610facce8bf
- · CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · node-typescript@1 · 2026-08-13 · ed25519:7da3f610facce8bf