Sign JWT using Jose

jwt.ts

import * as jose from 'jose'

const JWT_SECRET = new TextEncoder().encode(ENV.JWT_SECRET)

export const signJWT = async (
  data: Record<any, any>,
  opts?: {
    iat?: number
    exp?: string | number
  },
) => {
  const alg = 'HS256'
  const jwt = await new jose.SignJWT(data)
    .setProtectedHeader({ alg })
    .setIssuedAt(opts?.iat)
    .setIssuer('example.app')
    .setAudience('example.app')
    .setExpirationTime(opts?.exp || '1h')
    .sign(JWT_SECRET)

  return jwt
}

export const verifyJWT = async (jwt: string) => {
  const { payload } = await jose.jwtVerify(jwt, JWT_SECRET, {
    issuer: 'example.app',
    audience: 'example.app',
  })

  return payload
}