Function signAuthJwt

lib/auth.ts:32–39

(key: CryptoKey, data: T)

  await crypto.subtle.importKey('raw', textToData(key), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign', 'verify']);

async function signAuthJwt<T = JwtData>(key: CryptoKey, data: T): Promise<string> {
  const payload = encodeBase64Url(textToData(JSON.stringify({ alg: 'HS256', typ: 'JWT' }))) + '.' +
    encodeBase64Url(textToData(JSON.stringify(data) || ''));
  const signature = encodeBase64Url(
    new Uint8Array(await crypto.subtle.sign({ name: 'HMAC' }, key, textToData(payload))),
  );
  return `${payload}.${signature}`;
}

export async function verifyAuthJwt<T = JwtData>(key: CryptoKey, jwt: string): Promise<T> {
  const jwtParts = jwt.split('.');