Skip to content

Commit

Permalink
Update docs/machine-requests/manual-jwt.mdx
Browse files Browse the repository at this point in the history
Co-authored-by: Bryce Kalow <[email protected]>
  • Loading branch information
Ben2W and brkalow committed Feb 7, 2025
1 parent 0caaaef commit d029ef2
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docs/machine-requests/manual-jwt.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ description: Learn how to manually verify Clerk-generated machine tokens (JWTs).

Your Clerk-generated [machine tokens](/docs/machine-requests/machine-tokens) are JWTs which are signed using your instance's private key and can be verified using your instance's public key.

For every machine request, you must validate the token to ensure it hasn't expired or been tampered with (i.e., it's authentic and secure). Additionally, you likely want to differentiate between machine and user requests. If these validations succeed, then the machine is authenticated to your application.
For every machine request, you must validate the token to ensure it hasn't expired or been tampered with (i.e., it's authentic and secure). Additionally, you might want to differentiate between machine and user requests within your application. If these validations succeed, then the machine is authenticated and granted access to your application.

> [!TIP]
> To differentiate between a machine token and user token, the `sub` claim in a machine token starts with `mch_` instead of `user_` on a session token.
Expand Down

0 comments on commit d029ef2

Please sign in to comment.