Method CreateAuthToken

internal/token/auth_token.go:121–169

CreateAuthToken creates a new auth token when userlogs in

(gc *gin.Context, cfg *AuthTokenConfig)

// CreateAuthToken creates a new auth token when userlogs in
func (p *provider) CreateAuthToken(gc *gin.Context, cfg *AuthTokenConfig) (*AuthToken, error) {
	_, fingerPrintHash, sessionTokenExpiresAt, err := p.CreateSessionToken(cfg)
	if err != nil {
		return nil, err
	}
	accessToken, accessTokenExpiresAt, err := p.CreateAccessToken(cfg)
	if err != nil {
		return nil, err
	}

	atHash := sha256.New()
	atHash.Write([]byte(accessToken))
	atHashBytes := atHash.Sum(nil)
	// hashedToken := string(bs)
	atHashDigest := atHashBytes[0 : len(atHashBytes)/2]
	atHashString := base64.RawURLEncoding.EncodeToString(atHashDigest)
	cfg.AtHash = atHashString
	codeHashString := ""
	if cfg.Code != "" {
		codeHash := sha256.New()
		codeHash.Write([]byte(cfg.Code))
		codeHashBytes := codeHash.Sum(nil)
		codeHashDigest := codeHashBytes[0 : len(codeHashBytes)/2]
		codeHashString = base64.RawURLEncoding.EncodeToString(codeHashDigest)
	}
	cfg.CodeHash = codeHashString
	idToken, idTokenExpiresAt, err := p.CreateIDToken(cfg)
	if err != nil {
		return nil, err
	}

	res := &AuthToken{
		FingerPrint:           cfg.Nonce,
		FingerPrintHash:       fingerPrintHash,
		SessionTokenExpiresAt: sessionTokenExpiresAt,
		AccessToken:           &JWTToken{Token: accessToken, ExpiresAt: accessTokenExpiresAt},
		IDToken:               &JWTToken{Token: idToken, ExpiresAt: idTokenExpiresAt},
	}
	if utils.StringSliceContains(cfg.Scope, "offline_access") {
		refreshToken, refreshTokenExpiresAt, err := p.CreateRefreshToken(cfg)
		if err != nil {
			return nil, err
		}

		res.RefreshToken = &JWTToken{Token: refreshToken, ExpiresAt: refreshTokenExpiresAt}
	}

	return res, nil
}

// CreateSessionToken creates a new session token
func (p *provider) CreateSessionToken(cfg *AuthTokenConfig) (*SessionData, string, int64, error) {