What This Adds In Cloud Code

• Fast token issue/verify flow without external dependency setup.
• Consistent defaults (HS256, typ: JWT).
• Useful for signed links, short-lived API access, and callback state.

Quick Start

const JWT = require('jwt');
const token = JWT.encode({ customer_id: 'cus_123' }, Nimbu.Site.env.get('JWT_SECRET'));

API

Function	Params	Returns	Notes
encode(payload, secret, algorithm, headerFields)	object/string params	string | null	Returns token; null on encode failure.
decode(token, secret, verify, options)	token + options	object | { error: string }	Returns payload object or error object.

Practical Example

const JWT = require('jwt');

const payload = JWT.decode(request.params.token, Nimbu.Site.env.get('JWT_SECRET'), true);
if (payload.error) {
  return response.error('token', payload.error);
}

response.success({ customerId: payload.customer_id });

Failure Modes & Gotchas

• Decode returns { error } instead of throwing.
• Validate expiry claims (exp) in your logic.

Related Modules

• crypto
• site-variables