Method CreateRefreshToken

internal/token/auth_token.go:193–222

CreateRefreshToken util to create JWT token

(cfg *AuthTokenConfig)

// CreateRefreshToken util to create JWT token
func (p *provider) CreateRefreshToken(cfg *AuthTokenConfig) (string, int64, error) {
	// Lifetime is configurable via --refresh-token-expires-in (seconds).
	// Default 30 days when unset or non-positive.
	expirySeconds := p.config.RefreshTokenExpiresIn
	if expirySeconds <= 0 {
		expirySeconds = 60 * 60 * 24 * 30
	}
	expiryBound := time.Duration(expirySeconds) * time.Second
	expiresAt := time.Now().Add(expiryBound).Unix()
	customClaims := jwt.MapClaims{
		"iss":           cfg.HostName,
		"aud":           p.config.ClientID,
		"sub":           cfg.User.ID,
		"exp":           expiresAt,
		"iat":           time.Now().Unix(),
		"token_type":    constants.TokenTypeRefreshToken,
		"roles":         cfg.Roles,
		"scope":         cfg.Scope,
		"nonce":         cfg.Nonce,
		"login_method":  cfg.LoginMethod,
		"allowed_roles": strings.Split(cfg.User.Roles, ","),
	}

	token, err := p.SignJWTToken(customClaims)
	if err != nil {
		return "", 0, err
	}

	return token, expiresAt, nil
}

// CreateAccessToken util to create JWT token, based on
// user information, roles config and CUSTOM_ACCESS_TOKEN_SCRIPT