storage-upload/api/media/security.mjs

// import * as jwt from '../jwt.mjs'
import decode from '../jwt/decode.mjs'
import config from '../config.mjs'

export function verifyToken(ctx) {
  if (!ctx.query.token) {
    throw new Error('Token is missing in query')
  }

  let decoded = decode(ctx.query.token, config.get('sites'), [])

  return decoded.iss
}