directus

1
import jwt from 'jsonwebtoken';
2

3
/**
4
 * Check if a given string conforms to the structure of a JWT
5
 * and whether it is issued by Directus.
6
 */
7
export default function isDirectusJWT(string: string): boolean {
8
	try {
9
		const payload = jwt.decode(string, { json: true });
10
		if (payload?.iss !== 'directus') return false;
11
		return true;
12
	} catch {
13
		return false;
14
	}
15
}
16