const jwt = require("jsonwebtoken");

const ver = require("jsonwebtoken/package.json").version;

const secret = "schism-secret";

const claims = { sub: "alice", iat: 1700000000, exp: 9999999999 };

const token = jwt.sign(claims, secret, {

  algorithm: "HS256",

  header: { crit: ["foobar"], foobar: true },

});

console.log(`jsonwebtoken version: ${ver}`);

console.log(`token: ${token}`);

console.log(

  `token header (decoded): ${Buffer.from(

    token.split(".")[0],

    "base64url"

  ).toString("utf8")}`

);

try {

  const decoded = jwt.verify(token, secret, { algorithms: ["HS256"] });

  console.log(`RESULT: ACCEPTED - ${JSON.stringify(decoded)}`);

  console.log(

    "RFC 7515 §4.1.11 requires this token be REJECTED because the"

  );

  console.log(

    "recipient (jsonwebtoken) does not understand the 'foobar' extension."

  );

  process.exitCode = 0;

} catch (e) {

  console.log(`RESULT: REJECTED - ${e.message}`);

  process.exitCode = 1;

}