Code Review,
Reimagined with AI

Paste your code and get instant, deep analysis — time and space complexity, hidden bugs, and smarter approaches. No setup, no API keys, just answers.

src/auth/validate.ts

12export const validateToken = async (token: string) => {

13if (!token) throw new Error('Missing token');

14const user = jwt.decode(token);

15const user = await jwt.verify(token, process.env.JWT_SECRET);

16return user;

17}

✨AI Review

Security VulnerabilityLine 14

Using jwt.decode without verification allows potential token forgery.

How it Works