Add jti claim to Client Token

models/ClientToken.js

@@ -2,6 +2,7 @@
  * Module dependencies
  */
 
+var crypto = require('crypto')
 var JWT = require('anvil-connect-jwt')
 var nowSeconds = require('../lib/time-utils').nowSeconds
 
@@ -26,10 +27,11 @@ var ClientToken = JWT.define({
  },
 
  // permitted claims
- claims: ['iss', 'sub', 'aud', 'iat', 'scope'],
+ claims: ['jti', 'iss', 'sub', 'aud', 'exp', 'iat', 'scope'],
 
  // modify payload schema
  registeredClaims: {
+ jti: { format: 'String', required: true, default: random },
  iss: { format: 'StringOrURI', required: true },
  sub: { format: 'StringOrURI', required: true },
  aud: { format: 'StringOrURI', required: true },
@@ -40,6 +42,14 @@ var ClientToken = JWT.define({
 
 })
 
+/**
+ * Random
+ */
+
+function random () {
+ return crypto.randomBytes(10).toString('hex')
+}
+
 /**
  * Issue
  */

test/unit/models/clientTokenSpec.coffee

@@ -62,6 +62,9 @@ describe 'Client Token', ->
 
  describe 'claims', ->
 
+ it 'should have "jti" Token Identifer', ->
+ ClientToken.registeredClaims.jti.format.should.equal 'String'
+
  it 'should require "iss" Issuer Identifier', ->
  ClientToken.registeredClaims.iss.required.should.be.true