auth0/node-jsonwebtoken

JsonWebToken implementation for node.js http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html

Stars: 18.2k
Forks: 1.3k
Open beginner issues: 2
Indexed issues: 139

Dominant language: JavaScript
License: MIT
Last GitHub push: Jun 25, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

verify() resolves a string secret by attempting createPublicKey() first, costing 4x-52x on the HS* path Open

Difficulty 4/5 3-5 days Newbie friendliness 65/100

auth0/node-jsonwebtoken#1046 · Opened Sep 17, 2026
jwt.verify() returns numeric payload claims as strings Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

auth0/node-jsonwebtoken#1042 · 1 comment · Opened Aug 12, 2026
[Tool Share] cad-automation - Zero-cost CAD automation tool Open

Difficulty 5/5 Over a week Newbie friendliness 10/100

auth0/node-jsonwebtoken#1034 · Opened Jun 14, 2026
jwt.verify accepts tokens with unrecognized `crit` header extensions (RFC 7515 §4.1.11) Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

auth0/node-jsonwebtoken#1032 · Opened May 27, 2026
ReDoS in verify() when audience option is a RegExp: attacker-controlled aud claim → catastrophic backtracking Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

auth0/node-jsonwebtoken#1031 · Opened May 24, 2026
Power Open

Difficulty 5/5 Over a week Newbie friendliness 5/100

auth0/node-jsonwebtoken#1030 · 2 comments · Opened May 15, 2026
Inquiry about lodash dependency updates Open

Difficulty 1/5 Under an hour Newbie friendliness 20/100

auth0/node-jsonwebtoken#1023 · 1 reaction · Opened Apr 22, 2026
Bug: clockTolerance accepts arbitrarily large values, bypassing exp verification entirely Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

auth0/node-jsonwebtoken#1021 · Opened Apr 1, 2026
Regex audience matching without anchors is a security footgun Open

Difficulty 2/5 1-3 hours Newbie friendliness 52/100

auth0/node-jsonwebtoken#1019 · 1 comment · 1 reaction · Opened Mar 30, 2026
Enable header.typ assertion Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

auth0/node-jsonwebtoken#1004 · 1 comment · 1 reaction · Opened Nov 11, 2025
`jwt.sign()` callback is executed twice for "The payload already has an "..." property" errors Open

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

auth0/node-jsonwebtoken#1000 · 2 comments · 1 reaction · Opened Sep 10, 2025
Node 24 compatibility Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

auth0/node-jsonwebtoken#992 · 23 comments · 62 reactions · Opened May 7, 2025
get rif of lodash dependency Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

auth0/node-jsonwebtoken#991 · 1 comment · 8 reactions · Opened Apr 26, 2025
Feature Request: Support for Edwards-Curve Digital Signature Algorithm (EdDSA) in JWT Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

auth0/node-jsonwebtoken#987 · 3 comments · 2 reactions · Opened Feb 5, 2025
jwt.verify is not async based on callback Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

auth0/node-jsonwebtoken#984 · 2 comments · Opened Jan 18, 2025
Node.js 'crypto' module error in jsonwebtoken Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

auth0/node-jsonwebtoken#980 · 5 comments · Opened Oct 14, 2024
Next js - Getting Error while trying to verifying the token with secret in v9+ error is right-hand side of 'instanceof' is not an object #973 Open

Difficulty 4/5 3-5 days Newbie friendliness 15/100

auth0/node-jsonwebtoken#974 · 1 comment · Opened Jun 14, 2024
allowInsecureKeySizes flag not present among TS types. Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

auth0/node-jsonwebtoken#969 · 1 comment · Opened May 16, 2024
HS256 algorithm JWT sign returning RS256 Algorithm instead of HS256 Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

auth0/node-jsonwebtoken#968 · 1 reaction · Opened May 12, 2024
What happened? The performance of jsonwebtoken 9.0.2 is 50 times slower than 8.5.1 Open

Difficulty 4/5 3-5 days Newbie friendliness 28/100

auth0/node-jsonwebtoken#966 · 4 comments · 3 reactions · Opened Apr 11, 2024
Documentation Duplicacy Open

Difficulty 1/5 Under an hour Newbie friendliness 35/100

auth0/node-jsonwebtoken#964 · 1 comment · Opened Mar 27, 2024
import `jsonwebtoken` throws error Open

Difficulty 3/5 1-2 days Newbie friendliness 32/100

auth0/node-jsonwebtoken#963 · 7 comments · 3 reactions · Opened Mar 15, 2024
Error using jsonwebtoken: global is not defined Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

auth0/node-jsonwebtoken#962 · 2 comments · Opened Feb 28, 2024
Use along KMS asymmetrical key Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

auth0/node-jsonwebtoken#961 · 2 reactions · Opened Feb 21, 2024
GCP KMS to Create JWT Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

auth0/node-jsonwebtoken#960 · Opened Feb 20, 2024
Disallowing Validation of Expired Tokens Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

auth0/node-jsonwebtoken#959 · 1 reaction · Opened Feb 5, 2024
JWT payload size > 475 bytes Open

Difficulty 4/5 3-5 days Newbie friendliness 20/100

auth0/node-jsonwebtoken#956 · Opened Jan 10, 2024
Verify an already decoded token Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

auth0/node-jsonwebtoken#955 · 2 comments · Opened Jan 8, 2024
Importing `decode` function from jsonwebtoken causes error Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

auth0/node-jsonwebtoken#954 · 6 comments · 2 reactions · Opened Jan 4, 2024
Rename `decode` function `unsafeDecode` to highlight the risk Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

auth0/node-jsonwebtoken#952 · 6 comments · 6 reactions · Opened Dec 22, 2023
Set options via Environment Variables Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

auth0/node-jsonwebtoken#951 · Opened Dec 20, 2023
TypeError: invalid 'instanceof' operand KeyObject Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

auth0/node-jsonwebtoken#950 · 13 comments · 2 reactions · Opened Dec 2, 2023
`sign` crashes with `validator.isValid is not a function` for certain objects Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

auth0/node-jsonwebtoken#945 · 2 comments · Opened Nov 3, 2023
Performance regression on crypto `createPublicKey` and `createPrivateKey` APIs after node v17 Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

auth0/node-jsonwebtoken#944 · 1 comment · Opened Oct 25, 2023
How to prevent users with expired JWTs from receiving Firebase Cloud Messaging notifications after automatic logout? Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

auth0/node-jsonwebtoken#943 · Opened Oct 17, 2023
Jsonwebtoken don't support verbatimModuleSyntax typescript compiler option Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

auth0/node-jsonwebtoken#942 · 1 reaction · Opened Sep 28, 2023
Navbar is Not working Properly [Issue] Open

Difficulty 5/5 Over a week Newbie friendliness 10/100

auth0/node-jsonwebtoken#940 · 1 comment · Opened Sep 23, 2023
TypeError: Right hand side of instanceof is not an object Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

auth0/node-jsonwebtoken#939 · 15 comments · 11 reactions · Opened Sep 10, 2023
Cyrillic characters Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

auth0/node-jsonwebtoken#938 · 2 comments · Opened Sep 2, 2023
Error on load, Error: Cannot find module './lodash' Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

auth0/node-jsonwebtoken#934 · 1 comment · 1 reaction · Opened Aug 29, 2023
Vulnerability / Unexpected Token Verification Behavior with Private Key Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

auth0/node-jsonwebtoken#930 · 7 comments · Opened Aug 18, 2023
README.md inappropriately references functions as asynchronous when they are in fact all synchronous with inline callback support Open

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

auth0/node-jsonwebtoken#929 · 4 comments · 3 reactions · Opened Aug 11, 2023
Request to Contribute: Signing using Managed Keys Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

auth0/node-jsonwebtoken#928 · 2 reactions · Opened Aug 9, 2023
TypeError: validator.isValid is not a function Open

Difficulty 4/5 3-5 days Newbie friendliness 10/100

auth0/node-jsonwebtoken#927 · 3 comments · Opened Aug 6, 2023
What if the refresh token is compromised Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

auth0/node-jsonwebtoken#923 · 2 comments · 2 reactions · Opened Jul 13, 2023
sign token is not equal with https://jwt.io/ Open

Difficulty 3/5 1-2 days Newbie friendliness 30/100

auth0/node-jsonwebtoken#918 · 2 comments · Opened Jun 30, 2023
package-lock.json is not added to the .gitignore file. Open

Difficulty 1/5 Under an hour Newbie friendliness 15/100

auth0/node-jsonwebtoken#913 · 1 comment · Opened May 21, 2023
what is the reason to not making a function to invalidate the token manually? Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

auth0/node-jsonwebtoken#911 · 1 comment · Opened May 15, 2023
import not working on node 18.12 Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

auth0/node-jsonwebtoken#907 · 6 comments · 1 reaction · Opened Apr 22, 2023
Remove the dependency of `once` method of lodash Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

auth0/node-jsonwebtoken#902 · 2 comments · 2 reactions · Opened Apr 12, 2023

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

auth0/node-jsonwebtoken

Showing the newest 100

Get new issues in your inbox