verifyTokenAuthorization


Verifies Auth 2.‚Äč0 tokens.

OptionTypeDescriptionRequires
use‚ÄčAdvancedboolean

If enabled, allows you to specify advanced options such as algorithm, escape‚ÄčHmac‚ÄčInputs, ignore‚ÄčQuery‚ÄčString, transition‚ÄčKey, and salt.

{"displayType":"boolean","tag":"input","type":"checkbox"}
locationenum

Specifies where to find the token in the incoming request.

{"displayType":"enum","options":["COOKIE","QUERY_STRING","CLIENT_REQUEST_HEADER"],"tag":"select"}
Supported values:
CLIENT_REQUEST_HEADER
COOKIE
QUERY_STRING
location‚ÄčIdstring

When location is CLIENT_‚ÄčREQUEST_‚ÄčHEADER, specifies the name of the incoming request's header where to find the token.

{"displayType":"string","tag":"input","type":"text"}
algorithmenum

Specifies the algorithm that generates the token. It needs to match the method chosen in the token generation code.

use‚ÄčAdvanced is true
{"displayType":"enum","options":["SHA256","SHA1","MD5"],"tag":"select"}
{"if":{"attribute":"useAdvanced","op":"eq","value":true}}
Supported values:
MD5
SHA1
SHA256
escape‚ÄčHmac‚ÄčInputsboolean

URL-escapes HMAC inputs passed in as query parameters.

use‚ÄčAdvanced is true
{"displayType":"boolean","tag":"input","type":"checkbox"}
{"if":{"attribute":"useAdvanced","op":"eq","value":true}}
ignore‚ÄčQuery‚ÄčStringboolean

Enabling this removes the query string from the URL used to form an encryption key.

use‚ÄčAdvanced is true
{"displayType":"boolean","tag":"input","type":"checkbox"}
{"if":{"attribute":"useAdvanced","op":"eq","value":true}}
keyobject array

The shared secret used to validate tokens, which needs to match the key used in the token generation code.

{"displayType":"object array","tag":"input","todo":true}
transition‚ÄčKeyobject array

Specifies a transition key as a hex value.

use‚ÄčAdvanced is true
{"displayType":"object array","tag":"input","todo":true}
{"if":{"attribute":"useAdvanced","op":"eq","value":true}}
saltobject array

Specifies a salt string for input when generating the token, which needs to match the salt value used in the token generation code.

use‚ÄčAdvanced is true
{"displayType":"object array","tag":"input","todo":true}
{"if":{"attribute":"useAdvanced","op":"eq","value":true}}
failure‚ÄčResponseboolean

When enabled, sends an HTTP error when an authentication test fails.

{"displayType":"boolean","tag":"input","type":"checkbox"}