Function debugTokenClaims

packages/container/src/util.ts:205–243

(
  label: string,
  token: string | undefined
)

}

export function debugTokenClaims(
  label: string,
  token: string | undefined
): void {
  if (!DEBUG) return;
  if (!token) {
    debug(`${label}: <absent>`);
    return;
  }
  try {
    const payload = token.split('.')[1];
    if (!payload) {
      debug(`${label}: <not a JWT>`);
      return;
    }
    const claims = JSON.parse(
      Buffer.from(payload, 'base64url').toString('utf8')
    ) as Record<string, unknown>;
    const safe = {
      iss: claims.iss,
      aud: claims.aud,
      sub: claims.sub,
      scope: claims.scope,
      owner: claims.owner,
      owner_id: claims.owner_id,
      project: claims.project,
      project_id: claims.project_id,
      exp:
        typeof claims.exp === 'number'
          ? `${new Date(claims.exp * 1000).toISOString()} (in ${Math.round(
              (claims.exp * 1000 - Date.now()) / 1000
            )}s)`
          : claims.exp,
    };
    debug(`${label}: ${JSON.stringify(safe)}`);
  } catch (err) {
    debug(`${label}: <unparseable claims> (${(err as Error).message})`);
  }
}

export interface OidcClaims {
  owner?: string;