From ce724eb9a775411719ca4e1166dde77db9b8d959 Mon Sep 17 00:00:00 2001 From: Andrew Jiang Date: Wed, 9 Oct 2024 14:24:40 -0400 Subject: [PATCH] make jwt payload parsing less strict --- packages/ui/docs-bundle/src/server/auth/FernJWT.ts | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/packages/ui/docs-bundle/src/server/auth/FernJWT.ts b/packages/ui/docs-bundle/src/server/auth/FernJWT.ts index 08bc41f4e7..abd9990b00 100644 --- a/packages/ui/docs-bundle/src/server/auth/FernJWT.ts +++ b/packages/ui/docs-bundle/src/server/auth/FernJWT.ts @@ -17,7 +17,8 @@ export async function verifyFernJWT(token: string, secret?: string, issuer?: str const verified = await jwtVerify(token, getJwtTokenSecret(secret), { issuer: issuer ?? "https://buildwithfern.com", }); - return FernUserSchema.parse(verified.payload.fern); + // if the token is undefined, FernUser will be an empty object + return FernUserSchema.optional().parse(verified.payload.fern) ?? {}; } export async function verifyFernJWTConfig(token: string, authConfig: AuthEdgeConfig | undefined): Promise {