jwt

package

v1.3.5 Latest Latest Go to latest Published: Aug 20, 2026 License: AGPL-3.0 Imports: 4 Imported by: 0

Details

View Source

const (
	TokenTypeAccess  = "access"
	TokenTypeRefresh = "refresh"
	TokenType2FA     = "2fa"
)

Token types, embedded as a claim and verified on validation.

View Source

var (
	ErrInvalidToken = errors.New("invalid token")
	ErrExpiredToken = errors.New("token has expired")
)

This section is empty.

type Claims struct {
	UserID    uuid.UUID `json:"user_id"`
	TokenType string    `json:"token_type,omitempty"`
	jwt.RegisteredClaims
}

type Manager struct {
	// contains filtered or unexported fields
}

func NewManager(accessSecret, refreshSecret string, accessExpiry, refreshExpiry time.Duration) *Manager

func (m *Manager) Generate2FAToken(userID uuid.UUID) (string, error)

Generate2FAToken creates a short-lived token for 2FA challenge (5 minutes)

func (m *Manager) GenerateAccessToken(userID uuid.UUID) (string, error)

GenerateAccessToken creates a new JWT access token

func (m *Manager) GenerateRefreshToken(userID uuid.UUID) (string, error)

GenerateRefreshToken creates a new JWT refresh token

func (m *Manager) GetRefreshTokenExpiry() time.Duration

func (m *Manager) Validate2FAToken(tokenString string) (*Claims, error)

Validate2FAToken validates a 2FA challenge token

func (m *Manager) ValidateAccessToken(tokenString string) (*Claims, error)

ValidateAccessToken validates and parses an access token. 2FA challenge tokens are rejected.

func (m *Manager) ValidateRefreshToken(tokenString string) (*Claims, error)

ValidateRefreshToken validates and parses a refresh token