Method getToken

src/AppStoreServerAPI.ts:279–307

* Returns an existing authentication token (if its still valid) or generates a new one.

()

   * Returns an existing authentication token (if its still valid) or generates a new one.
   */
  private async getToken(): Promise<string> {
    // Reuse previously created token if it hasn't expired.
    if (this.token && !this.tokenExpired) return this.token

    // Tokens must expire after at most 1 hour.
    const now = new Date()
    const expiry = new Date(now.getTime() + AppStoreServerAPI.maxTokenAge * 1000)
    const expirySeconds = Math.floor(expiry.getTime() / 1000)

    const payload = {
      bid: this.bundleId,
      nonce: randomUUID()
    }

    const privateKey = await this.key

    const jwt = await new jose.SignJWT(payload)
      .setProtectedHeader({ alg: "ES256", kid: this.keyId, typ: "JWT" })
      .setIssuer(this.issuerId)
      .setIssuedAt()
      .setExpirationTime(expirySeconds)
      .setAudience("appstoreconnect-v1")
      .sign(privateKey)

    this.token = jwt
    this.tokenExpiry = expiry

    return jwt
  }

  /**
   * Returns whether the previously generated token can still be used.