@e280/authlocal/x/trust/concepts/claim/sign.js

User-sovereign login system for everybody

import { Hex } from "@e280/stz";
import { signToken } from "../token/sign.js";
import { decodeToken } from "../token/decode.js";
import { tokentime } from "../token/tokentime.js";
export async function signClaim({ claim, session, appOrigin, audience, expiresAt }) {
    const proof = decodeToken(session.proofToken).payload.data;
    return signToken(session.secret, {
        jti: Hex.random(32),
        exp: tokentime.maybe(expiresAt),
        sub: proof.nametag.id,
        aud: audience,
        iss: appOrigin,
        data: {
            claim,
            proofToken: session.proofToken,
        },
    });
}
//# sourceMappingURL=sign.js.map