Generate token manually about devise-jwt

[waiting-for-dev]

Edited to fix a typo commented below

For this, you have to rely on the underlying library warden-jwt_auth:

Warden::JWTAuth::UserEncoder.new.encoder.call(user, scope)

[zaidhuda]

Warden::JWTAuth::UserEncoder.new.call(user, scope) doing this returns the token.

[scottrobertson]

Edit: Setting it to nil seems to work.

Since this was answered, it seems that the method now requires an aud. Does anyone have any idea how to generate that?

https://github.com/waiting-for-dev/warden-jwt_auth/blob/693f64d04dd1de8c697165ba0ebf7618d32168ec/lib/warden/jwt_auth/user_encoder.rb#L31-L34

[waiting-for-dev]

It is documented in the README:

https://github.com/waiting-for-dev/devise-jwt#aud_header

[waiting-for-dev]

Second argument of #call is devise scope. Probably it's :user. But keep in mind that this library is not intended to provide refresh tokens and that probably you'd be better off with something like OAuth2.

[zaidhuda]

There's no Class User found. However, I could find UserEncoder, but trying to invoke call gives undefined method 'call' for Warden::JWTAuth::UserEncoder:Class Did you mean? caller.

[waiting-for-dev]

Yep, sorry, I made a typo in the example. If everything is clear, I'm going to close this issue. Feel free to reopen if you have any other doubt.

[jackpope]

I am trying to use this solution to create a token refresh endpoint. If users tokens are near expiration, this endpoint will automatically be hit in order to keep them signed in. I am successfully getting back a new token, but when I put that in the Authorization header for the next request it doesn't authenticate.

Endpoint code:

def create
    if user_signed_in?
      json_response({
        token: Warden::JWTAuth::UserEncoder
          .new
          .call(current_user, :users, nil)
          .first
      })
    else
      json_response({
        message: '401 - Unauthorized'
      }, :Unauthorized)
    end
  end

How is a User record associated with a token?