> For the complete documentation index, see [llms.txt](https://docs.fortifiedid.se/pipes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.fortifiedid.se/pipes/valves/jwt/parsejwt.md). # ParseJwt Parses a JSON Web Token, JWT and verifies the signature. Claims is put on the current item. ## Configuration {% hint style="info" %} **Valve name:** `ParseJwt` {% endhint %} {% tabs %} {% tab title="Properties" %}

Name	Description	Default value	Mandatory	Expanded
`jwt_src`	Source of the JWT.	`"${request.access_token}"`	false	true
`verify_token`	If the signature should be verified.	`true`	false	false
`internal_http_destination`	HTTP module reference. Mandatory if `jwks_endpoint` is used to fetch public key.	N/A	false	false
`jwks_endpoint`	JWKS endpoint.	N/A	false	false
`keystore`	Keystore reference or json object containing keystore configuration. Used to verify JWT signature.	N/A	false	false
`keystore_alias`	Keystore alias.	N/A	false	false
`sign_algorithm`	Algorithm used when signature was created.	`"RS256"`	false	false

{% endtab %} {% tab title="Example" %}

Example with local keystore for signature validation:
{
    "name": "ParseJwt",
    "config": {
        "jwt_src": "${session.access_token}",
        "keystore": {
             "path": "/fortified_test/config/keystore.p12",
             "password": "secret",
             "type": "PKCS12"
        },
        "keystore_alias" : "jwt"
    }
}

Example with jwks_endpoint to fetch key for signature validation:
{
    "name": "ParseJwt",
    "config": {
        "jwt_src": "${session.access_token}",
        "internal_http_destination": "http_client_1",
        "jwks_endpoint": "http://192.168.50.228:8080/oidc/tenant1/.well-known/openid-configuration/jwks"
    }
}

{% endtab %} {% endtabs %}