# JWT Verify

Verifies that a JSON Web Token is valid and has been signed with the provided secret / private key. The key should be either the secret for HMAC algorithms or the PEM-encoded private key for RSA and ECDSA. JWT Verify lives in the **Cryptography** category of the `fx` menu. See [JSON Web Token (JWT)](https://datatracker.ietf.org/doc/html/rfc7519) for format details.

## Parameters

| Parameter         | Type   | Required | Default  | Description                                            |
| ----------------- | ------ | -------- | -------- | ------------------------------------------------------ |
| Input             | string | yes      | —        | Value to transform. Previous step output or a literal. |
| Public/Secret Key | string | no       | `secret` | Argument value for this operation.                     |

`Input` is the primary value (previous step output or a literal).

## Returned value

| Type   | Description                              |
| ------ | ---------------------------------------- |
| `JSON` | Result of the JWT Verify transformation. |

## Limitations

- Wrong key, algorithm options, or malformed input typically raises an evaluation error — fix Input or options before re-running.

## Example

<details>
<summary>Run JWT Verify</summary>

Verifies that a JSON Web Token is valid and has been signed with the provided secret / private key. Adjust optional parameters when the defaults do not match your payload.

1. Set **Input** to the value to transform (previous step output or a literal).

2. Review **Public/Secret Key** and keep defaults unless your format requires otherwise.

3. Confirm **Output value** shows the transformed result.

</details>