jwt

type Claims struct {
	TeamID    string `json:"team_id,omitempty"`
	UserID    string `json:"user_id,omitempty"`
	UserEmail string `json:"user_email,omitempty"`
	// Purpose restricts where a token is accepted. Empty means a regular
	// admin token; "playground" tokens are only valid on the proxy plane.
	Purpose string `json:"purpose,omitempty"`
	// ConsumerSlug binds a playground token to a single consumer route.
	ConsumerSlug string `json:"consumer_slug,omitempty"`
	jwt.RegisteredClaims
}

type Manager interface {
	CreateToken() (string, error)
	ValidateToken(tokenString string) error
	DecodeToken(tokenString string) (*Claims, error)
}