Method CreateAccessToken

internal/token/auth_token.go:226–259

CreateAccessToken util to create JWT token, based on user information, roles config and CUSTOM_ACCESS_TOKEN_SCRIPT

(cfg *AuthTokenConfig)

// CreateAccessToken util to create JWT token, based on
// user information, roles config and CUSTOM_ACCESS_TOKEN_SCRIPT
func (p *provider) CreateAccessToken(cfg *AuthTokenConfig) (string, int64, error) {
	expiryBound, err := utils.ParseDurationInSeconds(cfg.ExpireTime)
	if err != nil {
		expiryBound = time.Minute * 30
	}
	expiresAt := time.Now().Add(expiryBound).Unix()
	customClaims := jwt.MapClaims{
		"iss":           cfg.HostName,
		"aud":           p.config.ClientID,
		"nonce":         cfg.Nonce,
		"sub":           cfg.User.ID,
		"exp":           expiresAt,
		"iat":           time.Now().Unix(),
		"token_type":    constants.TokenTypeAccessToken,
		"scope":         cfg.Scope,
		"roles":         cfg.Roles,
		"login_method":  cfg.LoginMethod,
		"allowed_roles": strings.Split(cfg.User.Roles, ","),
	}
	// check for the extra access token script
	if p.config.CustomAccessTokenScript != "" {
		resUser := cfg.User.AsAPIUser()
		userBytes, _ := json.Marshal(&resUser)
		var userMap map[string]interface{}
		_ = json.Unmarshal(userBytes, &userMap)
		p.runCustomAccessTokenScript(userBytes, customClaims)
	}
	token, err := p.SignJWTToken(customClaims)
	if err != nil {
		return "", 0, err
	}

	return token, expiresAt, nil
}

// GetAccessToken returns the access token from the request (either from header or cookie)
func (p *provider) GetAccessToken(gc *gin.Context) (string, error) {