pi-lens/rules/ast-grep-rules/rule-tests/jwt-no-verify-test.yml

Real-time code feedback for pi — LSP, linters, formatters, type-checking, structural analysis & booboo

id: jwt-no-verify
valid:
  - 'jwt.verify(token, secret)'
  - 'jwt.decode(token)'
  - 'jwt.decode(token, { complete: true })'
invalid:
  - 'jwt.decode(token, { noVerify: true })'
  - 'jwt.verify(token, { ignoreExpiration: true })'
  - 'jwt.verify(token, { ignoreNotBefore: true })'