Function createToken

integration/crypto_test.go:484–509

(t *testing.T, jwk *jose.JSONWebKey, now time.Time)

}

func createToken(t *testing.T, jwk *jose.JSONWebKey, now time.Time) string {
	t.Helper()

	c := &jose.Claims{
		Issuer:    "TestIssuer",
		Subject:   "TestSubject",
		Audience:  jose.Audience([]string{"TestAudience"}),
		Expiry:    jose.UnixNumericDate(now.Add(1 * time.Minute).Unix()),
		NotBefore: jose.UnixNumericDate(now.Add(-1 * time.Minute).Unix()),
		IssuedAt:  jose.UnixNumericDate(now.Unix()),
		ID:        "test-id",
	}

	so := new(jose.SignerOptions).WithType("JWT").WithHeader("kid", jwk.KeyID)
	signer, err := jose.NewSigner(jose.SigningKey{
		Algorithm: jose.SignatureAlgorithm(jwk.Algorithm),
		Key:       jwk.Key,
	}, so)
	require.NoError(t, err)

	payload := make(map[string]any)
	raw, err := jose.Signed(signer).Claims(c).Claims(payload).CompactSerialize()
	require.NoError(t, err)

	return raw
}

func readBytes(t *testing.T, file string) []byte {
	t.Helper()