Solid OIDC Access Token Verifier - Error: JWSInvalid: Invalid Compact JWS, code: 'ERR_JWS_INVALID'

1

Hi,

I trying to use the library https://github.com/CommunitySolidServer/access-token-verifier to validate a DPoP token requested using this process: Client credentials - Community Solid Server but I’m getting some errors and I think they are related to the way I’m using the method createSolidTokenVerifier in JavaScript. I’m not sure what I should used for the different params in the options:

{
      header: dpopHeader as string,
      method: requestMethod as RequestMethod,
      url: requestURL as string
    }

Here is the code in case someone knows how to deal with it:

try{        
        const solidOidcAccessTokenVerifier = createSolidTokenVerifier()
        const { client_id: clientId, webid: webId } = await solidOidcAccessTokenVerifier('DPoP ' +accessToken, {
            header: '',
            method: 'GET',
            url: ''
          })        
        console.log(`Verified Access Token via WebID: ${webId} and for client: ${clientId}`)
    } catch(err){
        console.log(err)
    }

The error I get is:

JWSInvalid: Invalid Compact JWS, code: ‘ERR_JWS_INVALID’

Here’s also an example of the token I generated that can be validated at https://jwt.io

eyJhbGciOiJFUzI1NiIsInR5cCI6ImF0K2p3dCIsImtpZCI6ImpnOXRUaHg2TkVxQVBydVlTTXRFTlZKNENPOERERkRJOXl1M2xQREcxMnMifQ.eyJ3ZWJpZCI6Imh0dHA6Ly9sb2NhbGhvc3Q6MzAwMC9mYW5kcm9pZGUvcHJvZmlsZS9jYXJkI21lIiwianRpIjoiaXNFX2lWanBaR3BZLXBlSHlUcmd2Iiwic3ViIjoibXktdG9rZW5fMzYyYjgzZjItZmE5Yy00NTNlLWJlNzctOTA2M2IyOWIwMWI5IiwiaWF0IjoxNjczNDM2MzcyLCJleHAiOjE2NzM0MzY5NzIsInNjb3BlIjoid2ViaWQiLCJjbGllbnRfaWQiOiJteS10b2tlbl8zNjJiODNmMi1mYTljLTQ1M2UtYmU3Ny05MDYzYjI5YjAxYjkiLCJpc3MiOiJodHRwOi8vbG9jYWxob3N0OjMwMDAvIiwiYXVkIjoic29saWQiLCJjbmYiOnsiamt0IjoiaWpwckkwTHRPYTlhaXI5SVBMX2xpaVZfVTQwcG5XOUJhRFZHblRFMThLayJ9fQ.bVVzutSvX1pNuPSPpmeUuKqJXVyvfXdZ1QmaLsCElG4fwE3CQHrvrvshJtASmTl5gpFEunXwEAm4tTKS92bnKQ

Thanks in advance, any help or comment would be appreciated!

2

Here you can find a running example in Replit:
replit.com - SOLID OIDC Access Token Verifier