The JWS string to verify
The public CryptoKey, PEM public key string, or HMAC shared secret
Mandatory expected algorithm to enforce (e.g. 'RS256', 'HS256', 'HS384', 'HS512')
A promise resolving to true if the signature is valid
Verifies a JSON Web Signature (JWS) against a provided key or secret.
Enforces a mandatory caller-supplied expectedAlg for algorithm dispatch to prevent algorithm confusion attacks.
Supports:
RS256: via CryptoKey or PEM public key stringHS256, HS384, HS512: via shared secret string or Uint8ArrayThe JWS string to verify
The public CryptoKey, PEM public key string, or HMAC shared secret
Mandatory expected algorithm to enforce (e.g. 'RS256', 'HS256', 'HS384', 'HS512')
A promise resolving to true if the signature is valid
Verifies a JSON Web Signature (JWS) against a provided key or secret.
Enforces a mandatory caller-supplied expectedAlg for algorithm dispatch to prevent algorithm confusion attacks.
Supports:
RS256: via CryptoKey or PEM public key stringHS256, HS384, HS512: via shared secret string or Uint8ArrayThe JWS string to verify
The public CryptoKey, PEM public key string, or HMAC shared secret
Mandatory expected algorithm to enforce (e.g. 'RS256', 'HS256', 'HS384', 'HS512')
A promise resolving to true if the signature is valid
Verifies a JSON Web Signature (JWS) against a provided key or secret. Enforces a mandatory caller-supplied
expectedAlgfor algorithm dispatch to prevent algorithm confusion attacks. Supports:RS256: via CryptoKey or PEM public key stringHS256,HS384,HS512: via shared secret string or Uint8Array