User Info Tokens

​

How it works

1. A user opens a Cobo Portal App on Cobo Portal.
2. Cobo Portal renders the app in an iframe.
3. The app requests a User Info Token from Cobo Portal.
4. Cobo Portal provides the User Info Token.
5. The app requests JSON Web Key Set (JWKS) from Cobo Portal.
6. Cobo Portal provides the JWKS.
7. The app decodes and verifies the User Info Token using the JWKS.
   Please use the algorithm specified in the alg field of the JWT header to perform the verification.

​

Request a User Info Token

1. Install Cobo UI Toolkit by running the following command:
   npm install cobo-ui-toolkit
   
2. Use the getAuthInfo function provided by Cobo UI Toolkit:
   import { getAuthInfo } from 'cobo-ui-toolkit';
   
   
   const authInfo = await getAuthInfo();
   
   /*
   type AuthInfo = {
       // The User Info Token
       token: string;
       // The organization ID of the user
       orgID: string;
       // The user ID
       userID?: string;
   };
   */
   
   if (authInfo.data) {
       // Handle the User Info Token.
       // Handle the organization ID.
   } else if (authInfo.error) {
       // Handle errors.
   }
   

{
    "sub": "1234",
    "email": "dev@cobo.com",
    "role_names": [
        "Viewer",
        "Spender",
        "Approver",
        "Operator",
        "Admin"
    ],
    "iss": "https://portal.dev.cobo.com/",
    "iat": 1723705170,
    "exp": 1723705470,
    "jti": "6a02090be57a4718bc1b0a3914d70584",
    "aud": "I5rK1KnSA9xtIbIrqdzJLVPrTc0EsaGG"
}

​

Validate a User Info Token

• Production environment: https://api.cobo.com/v2/oauth/authorize/jwks.json
• Development environment: https://api.dev.cobo.com/v2/oauth/authorize/jwks.json