Function signUploadToken

apps/sim/lib/uploads/core/upload-token.ts:35–43

(payload: UploadTokenPayload, expiresInSeconds = 60 * 60)

 * Used to prevent IDOR on multipart upload follow-up calls (get-part-urls, complete, abort).
 */
export function signUploadToken(payload: UploadTokenPayload, expiresInSeconds = 60 * 60): string {
  const signed: SignedPayload = {
    ...payload,
    exp: Math.floor(Date.now() / 1000) + expiresInSeconds,
    v: 1,
  }
  const encoded = toBase64Url(JSON.stringify(signed))
  return `${encoded}.${sign(encoded)}`
}

export type UploadTokenVerification =
  | { valid: true; payload: UploadTokenPayload }