Asymmetric JWT

asymmetric-jwt.js

const jwt = require('jsonwebtoken');
const fs = require('fs');

const PRIVATE_KEY = fs.readFileSync('./cert/private.key');
const PUBLIC_KEY = fs.readFileSync('./cert/cert.pub');

const userInfo = {
    id: 1,
    name: 'example'
};

console.log('====================================');
console.log('Initial Payload:');
console.log(userInfo);
console.log('====================================');
console.log();

let token = jwt.sign(userInfo, PRIVATE_KEY, { algorithm: 'RS256' });

console.log('====================================');
console.log('token:');
console.log(token);
console.log('====================================');
console.log();

let payload = jwt.verify(token, PUBLIC_KEY, (err, payload) => {
    if (err)
        console.log(err)
    else {
        console.log('====================================');
        console.log('decoded:');
        console.log(payload);
        console.log('====================================');
    }
});

gen-keys.sh

openssl genrsa -out /path/to/key/private.key 4096
openssl rsa -in /path/to/key/private.key -pubout -out cert/cert.pub