How to validate external JWT token using JavaScript policy..?

[saisurekha1317]

I would like to validate external token using JavaScript policy.

I could not find any documentation on this. Please provide example code snippets, if possible.

Thank you.

[sidd-harth]

Why do you want to use Javascript? Apigee has an out-of-the-box VerifyJWT Policy.

Apigee Edge experts use Javascript or Java only when the required functionality is not available in the OOTB Policies.

==

Previously, there was a Java callout that verified JWT. The repo still exists:

https://github.com/apigee/iloveapis2015-jwt-jwe-jws

This callout is not supported, and is also not necessary, since VerifyJWT is part of the product.

==

Did you try validatingJWT using Javascript on your local machine? If yes, then maybe you can use the same code/libraries in Apigee with some modifications.

Provide the code here if possible.

[dchiesa1]

Don't do that. Use VerifyJWT.