isTokenValid helper for pages router

index.d.ts

@@ -10,6 +10,8 @@ export declare function KindeProvider({
 
 export declare function handleAuth(): any;
 
+export declare function isTokenValid(): boolean;
+
 export type User = {
   id: string;
   name: string | null;

src/handlers/pageRouter/callback.js

@@ -1,5 +1,5 @@
-import jwt_decode from 'jwt-decode';
 import {config} from '../../config/index';
+import {isTokenValid} from '../../utils/pageRouter/isTokenValid';
 import {version} from '../../utils/version';
 
 var cookie = require('cookie');
@@ -31,18 +31,8 @@ export const callback = async (req, res) => {
         }
       );
       const data = await response.json();
-      const accessTokenHeader = jwt_decode(data.access_token, {header: true});
-      const accessTokenPayload = jwt_decode(data.access_token);
-      let isAudienceValid = true;
-      if (config.audience)
-        isAudienceValid = accessTokenPayload.aud == config.audience;
 
-      if (
-        accessTokenPayload.iss == config.issuerURL &&
-        accessTokenHeader.alg == 'RS256' &&
-        accessTokenPayload.exp > Math.floor(Date.now() / 1000) &&
-        isAudienceValid
-      ) {
+      if (isTokenValid(data)) {
         res.setHeader(
           'Set-Cookie',
           cookie.serialize(`kinde_token`, JSON.stringify(data), {

src/index.js

@@ -1,3 +1,4 @@
 export {KindeProvider, useKindeAuth} from './frontend/index';
 export {handleAuth} from './handlers/pageRouter/index';
+export {isTokenValid} from './utils/pageRouter/isTokenValid';
 export * from './session/pagesRouter/index';

src/utils/pageRouter/isTokenValid.js

@@ -0,0 +1,27 @@
+import jwt_decode from 'jwt-decode';
+import {config} from '../../config/index';
+
+const isTokenValid = (token) => {
+  const accessToken = (token && token.access_token) || token;
+  if (!accessToken) return false;
+
+  const accessTokenHeader = jwt_decode(accessToken, {header: true});
+  const accessTokenPayload = jwt_decode(accessToken);
+  let isAudienceValid = true;
+  if (config.audience) {
+    isAudienceValid = accessTokenPayload.aud == config.audience;
+  }
+
+  if (
+    accessTokenPayload.iss == config.issuerURL &&
+    accessTokenHeader.alg == 'RS256' &&
+    accessTokenPayload.exp > Math.floor(Date.now() / 1000) &&
+    isAudienceValid
+  ) {
+    return true;
+  } else {
+    return false;
+  }
+};
+
+export {isTokenValid};