dictyBase/modware-auth

package service

import (
    "time"

    "github.com/golang-jwt/jwt"
    "github.com/rs/xid"
)

type RefreshTokenClaims struct {
    // Identity is used as an identifier for a user's identity data
    // (it is an ID for orcid, an email for others)
    Identity string
    // Provider is the login provider
    Provider string
    // Standard JWT claims
    jwt.StandardClaims
}

func generateStandardClaims(expirationMinutes time.Duration) jwt.StandardClaims {
    return jwt.StandardClaims{
        Issuer:    "dictyBase",
        Subject:   "dictyBase login token",
        ExpiresAt: time.Now().Add(time.Minute * expirationMinutes).Unix(),
        IssuedAt:  time.Now().Unix(),
        NotBefore: time.Now().Unix(),
        Id:        xid.New().String(),
        Audience:  "user",
    }
}

func generateRefreshTokenClaims(identity string, provider string) RefreshTokenClaims {
    return RefreshTokenClaims{
        identity,
        provider,
        generateStandardClaims(refreshTokenExpirationTimeInMins),
    }
}