module Api
  class CoreJwt
    require 'jwt'
    KEY_SECRET = Rails.application.secrets.secret_key_base

    def self.encode(payload, expires_at = nil)
      if expires_at
        payload[:exp] = expires_at
      else
        payload[:exp] = Rails.configuration.x.core_api_token_ttl.from_now.to_i
      end
      payload[:iss] = Rails.configuration.x.core_api_token_iss
      payload[:salt] = SecureRandom.base64(30)
      JWT.encode(payload, KEY_SECRET, Rails.configuration.x.core_api_sign_alg)
    end

    def self.decode(token)
      HashWithIndifferentAccess.new(
        JWT.decode(token, KEY_SECRET, Rails.configuration.x.core_api_sign_alg)[0]
      )
    end

    def self.read_iss(token)
      HashWithIndifferentAccess.new(
        JWT.decode(token, nil, false)[0]
      )[:iss].to_s
    end

    # Method used by Doorkeeper for custom tokens
    def self.generate(options = {})
      encode(
        { sub: options[:resource_owner_id] },
        options[:expires_in].seconds.from_now.to_i
      )
    end
  end
end