Verify Cognito JWT tokens

verify-cognito-jwt.ts

import {
  CognitoJwtVerifier,
  CognitoJwtVerifierSingleUserPool,
} from 'aws-jwt-verify/cognito-verifier';

const verifier: CognitoJwtVerifierSingleUserPool<{
  userPoolId: string;
  tokenUse: 'access' | 'id';
  clientId: string;
}> = CognitoJwtVerifier.create({
  userPoolId: 'cognitoUserPoolId',
  clientId: 'cognitoAppIntegrationClientId',
});

console.log(verifier.verify(jwtToken))

For passport-jwt use case, refer to the official docs, it explains what to check when verifying access/id token.

https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-tokens-verifying-a-jwt.html#amazon-cognito-user-pools-using-tokens-prerequisites

It's f***ing helpful.