Whatever message this page gives is out now! Go check it out!

VerifyEncryptedJWT

Last update:
May 18, 2026

Description

Verify an encrypted JWT.

Syntax

verifyEncryptedJWT(token, EncryptOptions, config)

History

  • New in ColdFusion (2023 release).

Parameters

ParameterDescriptionRequired
token
Encrypted token created by ColdFusion.
Yes
encryptOptions
Create the signature using the struct below:
  • Key
  • KeyPair - private Key will be used.
  • Keystore file, keystore password, keystore alias
Yes
config
A struct with the following values:
  • clockSkew - time in seconds to account for difference between the systems generating and processing the JWT
  • returntype - plaintext/struct
Yes

Returns

A struct containing all the JWT claims.

Example

<cfset encr = {
    "keystore" = "test_encryption1.keystore",
    "keystoreAlias" = "contentKey",
    "keystorePassword" = "****",
    "keypairPassword" = "****"
}>
<cfset c = {
    "algorithm" = "RSA-OAEP",
    "encryption" = "A128CBC-HS256"
}>
<cfset config = {
    "returnType" = "struct"
}>
<cfset verifyjwe = VerifyEncryptedJWT(#URL.jwe#, encr, config)>
<cfdump var="#verifyjwe#">

Share this page

Was this page helpful?
We're glad. Tell us how this page helped.
We're sorry. Can you tell us what didn't work for you?
Thank you for your feedback. Your response will help improve this page.

On this page