Function: verifyActorToken()
verifyActorToken(
token,keys):ActorTokenCheck
Defined in: packages/authz/src/actor-token.ts:160
Checks that a compact JWS is an actor token signed by one of keys.
The header is checked before the key is looked up and the signature before the claims are read, so nothing a forger wrote is trusted before the signature is.
Parameters
token
string
The envelope's actorToken, untrusted.
keys
ReadonlyMap<string, ActorVerifyKey>
The verify keys this receiver holds, by kid.
Returns
The signer and the claims, or why not.