mirror of
https://github.com/IT4Change/Ocelot-Social.git
synced 2025-12-13 07:45:56 +00:00
e41a639cf1
This will prevent unintentional encoding of users email addresses in the JWT. @steffi201028 this might be interesting for you as well.
15 lines
395 B
JavaScript
15 lines
395 B
JavaScript
import jwt from 'jsonwebtoken'
|
|
import CONFIG from './../config'
|
|
|
|
// Generate an Access Token for the given User ID
|
|
export default function encode(user) {
|
|
const { id, name, slug } = user
|
|
const token = jwt.sign({ id, name, slug }, CONFIG.JWT_SECRET, {
|
|
expiresIn: '1d',
|
|
issuer: CONFIG.GRAPHQL_URI,
|
|
audience: CONFIG.CLIENT_URI,
|
|
subject: user.id.toString(),
|
|
})
|
|
return token
|
|
}
|