Add simple way to generate deploy tokens

src/auth/index.js

@@ -59,12 +59,26 @@ module.exports = server =>
         handler(request, reply) {
           const replyObj = {
             message: 'Token is valid',
-            credentials: _.omit(request.auth.credentials, ['password']),
+            credentials: request.auth.credentials,
           };
           reply(replyObj);
         },
       });
 
+      server.route({
+        method: 'GET',
+        path: '/deployToken',
+        config: {auth: 'token'},
+        handler(request, reply) {
+          // generate new deploy token
+          const user = request.auth.credentials;
+          const token = jwt.sign({loggedIn: true, user, deploy: true}, auth.privateKey, {
+            algorithm: 'HS256',
+          });
+          reply({token});
+        },
+      });
+
       server.route({
         method: 'GET',
         path: '/login',

test/login.js

@@ -55,8 +55,6 @@ module.exports = server =>
         t.ok(result.token, 'Has token');
 
         const decodedUser = jwt.verify(result.token, authConfig.privateKey);
-        delete decodedUser.iat;
-        delete decodedUser.exp;
 
         t.equal(decodedUser.user.username, 'admin', 'Login matches request');
         t.ok(decodedUser.loggedIn, 'Is logged in');
@@ -68,6 +66,31 @@ module.exports = server =>
       });
     });
 
+    tap.test('Should generate valid deploy token', t => {
+      const options = {
+        method: 'GET',
+        url: '/deployToken',
+        headers: {
+          Authorization: `Bearer ${token}`,
+        },
+      };
+
+      server.inject(options, response => {
+        const result = response.result;
+
+        t.equal(response.statusCode, 200, 'Correct status code');
+        t.ok(result.token, 'Has token');
+
+        const decodedUser = jwt.verify(result.token, authConfig.privateKey);
+
+        t.equal(decodedUser.user.username, 'admin', 'Login matches request');
+        t.ok(decodedUser.loggedIn, 'Is logged in');
+        t.ok(decodedUser.deploy, 'Is logged in');
+
+        t.end();
+      });
+    });
+
     tap.test('Should not login without a token', t => {
       const options = {
         method: 'POST',