How can I verify Memberstack JWTs on my server without hitting the warning issue? Planned

Hi there,

I'm researching whether Memberstack is a viable option for a new project. Most things seem to be great, however I was wondering about the JWT verification warning that is in the Memberstack Admin Node package documentation. It is a bit confusing to me that there is documentation describing how I could verify a JWT with Memberstack from my own server, but a warning is displayed that it won't work. The previous time someone asked on this forum, no real answer was given. So, is this currently a possibility? 

Please let me know, as this will be a dealbreaker for me if it does not work.

Thanks in advance,

Comments

5 comments

  • Comment author
    Duncan from Memberstack

    Hey Mathias 👋

    I'm checking with the team know. I should to have an answer for you by EOD tomorrow. 

    0
  • Comment author
    Josh Lopez

    Hello Mathias Meuleman 👋
    The JWT verification can be done with the Node.js version of the Admin Package. The warning is to let users know that they cannot verify JWT with the REST version.

    2
  • Comment author
    Mathias Meuleman

    Hi Duncan and Josh,

    Thanks for being so quick to respond. Interesting design choice, but you'll have your reasons for it. This at least helps me, so many thanks.

    0
  • Comment author
    Likhika Routray

    Hi everyone,

    I’m working on an integration where users are authenticated via Xano (with JWT tokens) and I need to create corresponding users in Member Stack.

    My current flow:

    1. User authenticates with Xano → receives Xano JWT token
    2. Xano creates user via Member Stack API and stores member_id in Xano database
    3. Goal: User should be authenticated in Member Stack using their existing Xano JWT

    Key question: Can Member Stack accept/validate JWT tokens issued by external platforms (like Xano), or does it only work with its own JWT format?

    Has anyone successfully implemented cross-platform JWT authentication with Member Stack? Any insights on whether Member Stack can validate external JWTs or if there’s a token exchange mechanism?

    Thanks in advance!

    0
  • Comment author
    Raquel Lopez

    Hello,

    Well, sadly the proposed workflow is not possible. Memberstack doesn't have a way to authenticate a users that is not via the login with password, authorized SSO providers (and passwordless login but that doesn't count). Memberstack verifies only JWT generated by them.

    I wouldn't like to suggest a workaround to a have a service in the middle because it will add more maintenance headaches. Might I ask, why do you need to use Xano? Would you consider a possibility that you use Memberstack for authentication exclusively and Xano for storing data from the users?

    0

Please sign in to leave a comment.