extractUserUnsafe

Type: extractUserUnsafe(content?: string): APIResult<string>

extractUserUnsafe() returns the decrypted username from an encrypted token, but does not perform HMAC-based tamper detection.

const result = sauthbase.use().extractUserUnsafe("encrypted-token");
if (result.success) {
  console.log(result.data); // Username is displayed
}

Overview

• Internally uses decrypt() to decrypt the token.
• No integrity check (HMAC verification) is performed.
• For secure usage, use extractUserWithVerify() instead.

Parameters

Return Value

• APIResult<string>: Returns the decrypted username.

Example Usage

const token = "encrypted-token";
const result = sauthbase.use().extractUserUnsafe(token);
 
if (result.success) {
  console.log("Username:", result.data);
} else {
  console.error("Failure:", result.message);
}

Notes

• This method may accept tampered tokens as valid.
• Use extractUserWithVerify() for untrusted data.
• Marked as @deprecated in the documentation and may be removed in future versions.