[example] How to write unit tests for our Express APIs with canned JWTs? about node-oauth2-jwt-bearer HOT 1 CLOSED

Hi @heidemn-faro - thanks for raising this

There are lots of ways you can test JWTs and it would be out of scope of this SDK to teach you - so I'm going to close this.

I tend to avoid adding test code to the actual deployable code - so I wouldn't recommend checking the NODE_ENV at runtime personally, but if you want to - you can use the validators config to disable specific claim checks and use things like expired JWTs to test.

There's some good examples of testing JWTs in this repo if you take a look at the code. Namely https://github.com/auth0/node-oauth2-jwt-bearer/blob/main/packages/access-token-jwt/test/helpers.ts#L25 - in this example we generate an asymmetric key pair for each test and make the public key available using nock and sign the test JWT with the private key - so this is a good option if you want to do integration style tests with the library.

For unit tests, you can of course stub the auth middleware all together.

from node-oauth2-jwt-bearer.