Add jwtVerify method

[marcomontalbano]

What I did

I added a jwtVerify method.

This method can verify the access token before decoding.

When the verification succeeds, it resolves to the decoded access token, it rejects otherwise.

import { authenticate, jwtVerify } from '@commercelayer/js-auth'

const auth = await authenticate('client_credentials', {
  clientId: 'your-client-id',
  scope: 'market:code:europe'
})

const decodedJWT = await jwtVerify(auth.accessToken, {
  ignoreExpiration: true
})

if ('organization' in decodedJWT.payload) {
  console.log('organization slug is', decodedJWT.payload.organization.slug)
}

Tip

The jwtDecode helper method should not be used for untrusted messages, since that helper method does not verify whether the signature is valid. If you need to verify the access token before decoding, use jwtVerify instead.

Checklist

• Make sure your changes are tested (stories and/or unit, integration, or end-to-end tests).
• Make sure to add/update documentation regarding your changes.
• You are NOT deprecating/removing a feature.