How to check more than one Issuer ?

[auth0]

How to check more than one Issuer ?

[jfromaniello]

Sorry for the delay, I've seen two cases of this.

Multiples issuer but always the same secret:

var expected_issuers = ['issuer1', 'issuer2'];
var decoded = jwt.verify(token, 'secret');
if (expected_issuers.indexOf(decoded.iss) === -1) {
  console.log('unexpected issuer for token');
}

Different secret per issuer:

var expected_issuers = {
  'issuer1': 'secret with issuer1',
  'issuer2': 'secret with issuer2'
};

var decoded = jwt.decode(token);

if (Object.keys(expected_issuers).indexOf(decoded.iss) === -1) {
  console.log('unexpected issuer for token');
}

var secret = expected_issuers[decoded.iss];
jwt.verify(token, secret);

Maybe we can add an issuers option to handle the first case, but the second case is more frequent.

[teknosains]

@jfromaniello thanks for reply...it really helps