Class OAuthJwtVerifier

OAuth bearer-token verifier for JWT access tokens.

Remarks

The verifier validates JOSE headers, pins allowed algorithms, resolves and caches JWKS documents, verifies the compact JWT signature, and applies the same resource, scope, subject, type, and lifetime checks as introspection.

Example

const verifier = new OAuthJwtVerifier({ config });
const authInfo = await verifier.verifyAccessToken(jwt);

Implements

OAuthTokenVerifier

Index

Constructors

constructor

Methods

verifyAccessToken

Constructors

constructor

new OAuthJwtVerifier(options?: OAuthJwtVerifierOptions): OAuthJwtVerifier
Create an OAuth JWT verifier.
Parameters
- options: OAuthJwtVerifierOptions = {}
  Verifier configuration and dependency overrides.
Returns OAuthJwtVerifier
- Defined in oauth-resource-server.ts:1582

Methods

verifyAccessToken

verifyAccessToken(token: string): Promise<AuthInfo>
Verify a compact JWT access token.
Parameters
- token: string
  Raw compact JWT value without the Bearer prefix.
Returns Promise<AuthInfo>
MCP auth information for the verified token.

Throws
OAuthError when the JWT is malformed, unsigned by a trusted key, or lacks required claims/scopes.

Throws
OAuthDependencyError when JWKS retrieval cannot complete.
Implementation of OAuthTokenVerifier.verifyAccessToken
- Defined in oauth-resource-server.ts:1602

Class OAuthJwtVerifier

Remarks

Example

Implements

Index

Constructors

Methods

Constructors

constructor

Parameters

Returns OAuthJwtVerifier

Methods

verifyAccessToken

Parameters

Returns Promise<AuthInfo>

Throws

Throws

Settings

On This Page