Function: verifyDelegationToken()

function verifyDelegationToken(
   raw, 
   secret, 
store?): Promise<DelegationClaims>;

Defined in: packages/core/src/handoff/DelegationToken.ts:184

Verify a delegation token and return its claims.

• Validates HMAC signature (constant-time)
• Validates expiry (exp)
• Hydrates carryOverState from store when state_id is present (Claim-Check retrieval)

Parameters

Parameter	Type	Description
raw	string	Raw token produced by mintDelegationToken
secret	string	HMAC signing secret (must match the mint secret)
store?	HandoffStateStore	Required if the token may contain a state_id

Returns

Promise<DelegationClaims>

Throws

HandoffAuthError on any validation failure