important

This is a contributors guide and NOT a user guide. Please visit these docs if you are using or evaluating SuperTokens.

Use a standard JWT verification lib on the BE

Status

This is just a proposal so far, it hasn't been accepted and needs further discussion.

Status:: proposed
Deciders:: rishabhpoddar, porcellus
Proposed by:: porcellus
Created:: 2022-12-06

Context and Problem Statement#

Since our access tokens will match standard JWTs, we can switch to using a jwt verification library with key caching instead of our own implementation.

Considered Options#

Keep using our own implementation
Switch to an external library

Decision Outcome#

We should switch to an external library

Our code gets smaller
We use the same method we will recommend to people if they aren't using our SDKs
The JWKs endpoint we use is the one exposed by the Core, since the one provided by the backend SDK could be disabled.