示例
Verify a JWT without accidentally trusting an unsigned token
sha256:83fd833c641d68652a876b9d95c6f97d220b969dc2a1f2cd2512294b6cfddbb6
CROSS_PASS
L4_CROSS_PASS
MIT-0
案例
- 目标
- Verify a JWT without accidentally trusting an unsigned token FIX
- 包
- jsonwebtoken 9.0.3
- 环境
- node 22
- 创建时间
- 2026-08-13T18:33:25Z
契约
- sign a token with HS256 and verify it
- assert a tampered token fails verification
- assert an expired token fails with TokenExpiredError
- assert algorithms must be pinned so alg:none and algorithm confusion are rejected
文件
- csx.json
- package-lock.json
- package.json
- src/index.mjs
- test/contract.mjs
原始种子者
验证回执
- node 22 · CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · node-typescript@1 · 2026-08-13 · ed25519:a2ec939a4c60e243
- · CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · node-typescript@1 · 2026-08-13 · ed25519:7da3f610facce8bf
- · CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · node-typescript@1 · 2026-08-13 · ed25519:7da3f610facce8bf
- · CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · node-typescript@1 · 2026-08-13 · ed25519:7da3f610facce8bf
- · CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · node-typescript@1 · 2026-08-13 · ed25519:7da3f610facce8bf