feat(jwt): add support for jsonwebtoken.sign options (#466)

graphile · Aug 6, 2019 · 7825f25 · 7825f25
1 parent 4ddc47b
commit 7825f25
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 4 deletions.
diff --git a/packages/graphile-build-pg/src/plugins/PgJWTPlugin.js b/packages/graphile-build-pg/src/plugins/PgJWTPlugin.js
@@ -4,7 +4,7 @@ import { sign as signJwt } from "jsonwebtoken";
 
 export default (function PgJWTPlugin(
   builder,
-  { pgJwtTypeIdentifier, pgJwtSecret }
+  { pgJwtTypeIdentifier, pgJwtSecret, pgJwtSignOptions }
 ) {
   builder.hook(
     "init",
@@ -78,17 +78,18 @@ export default (function PgJWTPlugin(
                 pgJwtSecret,
                 Object.assign(
                   {},
-                  token.aud
+                  pgJwtSignOptions,
+                  token.aud || (pgJwtSignOptions && pgJwtSignOptions.audience)
                     ? null
                     : {
                         audience: "postgraphile",
                       },
-                  token.iss
+                  token.iss || (pgJwtSignOptions && pgJwtSignOptions.issuer)
                     ? null
                     : {
                         issuer: "postgraphile",
                       },
-                  token.exp
+                  token.exp || (pgJwtSignOptions && pgJwtSignOptions.expiresIn)
                     ? null
                     : {
                         expiresIn: "1 day",

diff --git a/packages/postgraphile-core/src/index.ts b/packages/postgraphile-core/src/index.ts
@@ -20,6 +20,7 @@ import {
   formatSQLForDebugging,
 } from "graphile-build-pg";
 import { Pool, PoolClient } from "pg";
+import { SignOptions } from "jsonwebtoken";
 
 export {
   Plugin,
@@ -73,6 +74,7 @@ export interface PostGraphileCoreOptions {
   skipPlugins?: Array<Plugin>;
   jwtPgTypeIdentifier?: string;
   jwtSecret?: string;
+  jwtSignOptions?: SignOptions;
   /**
    * @deprecated UNSUPPORTED! Use an inflector plugin instead.
    */
@@ -201,6 +203,7 @@ const getPostGraphileBuilder = async (
     skipPlugins = [],
     jwtPgTypeIdentifier,
     jwtSecret,
+    jwtSignOptions,
     disableDefaultMutations,
     graphileBuildOptions,
     graphqlBuildOptions, // DEPRECATED!
@@ -368,6 +371,7 @@ const getPostGraphileBuilder = async (
     nodeIdFieldName: nodeIdFieldName || (classicIds ? "id" : "nodeId"),
     pgJwtTypeIdentifier: jwtPgTypeIdentifier,
     pgJwtSecret: jwtSecret,
+    pgJwtSignOptions: jwtSignOptions,
     pgDisableDefaultMutations: disableDefaultMutations,
     pgViewUniqueKey: viewUniqueKey,
     pgEnableTags: enableTags,