Authenticate an access token issued by Stytch from the Token endpoint.
M2M access tokens are JWTs signed with the project's JSON Web Keys, and can be validated locally using any Stytch client library.
You may pass in an optional set of scopes that the JWT must contain in order to enforce permissions.
const stytch = require('stytch');
const client = new stytch.Client({
project_id: 'PROJECT_ID',
secret: 'SECRET',
});
const params = {
access_token: 'eyJ...',
required_scopes: ['write:users'],
};
client.m2m
.authenticateToken(params)
.then((resp) => {
console.log(resp);
})
.catch((err) => {
console.log(err);
});{
"client_id": "m2m-client-test-d731954d-dab3-4a2b-bdee-07f3ad1be885",
"scopes": ["read:users","write:users"],
"custom_claims": {
"contact_email": "notice@example.com"
}
}