Generate 2 tokens with different exp time

I’m trying to generate 2 tokens: authorization token and refresh token. These tokens usually have different validity time. I can make a PR to add the options object in jwtService.sign, jwtService.verify, in order to override the existing JWT_MODULE_OPTIONS if another options are provided when calling the methods. This way we can generate an authorization token for 1 minute and a refresh token for let’s say 8h.

I’m submitting a…

[ ] Regression 
[ ] Bug report
[x] Feature request
[ ] Documentation issue or request
[ ] Support request => Please do not submit support request here, instead post your question on Stack Overflow.

Current behavior

In the current implementation you can generate tokens with the same validity time. Authorization token and refresh token would have the same validity time and this defies the whole purpose of this auth mechanism.

Expected behavior

Being able to generate tokens with different validity time.

Minimal reproduction of the problem with instructions

What is the motivation / use case for changing the behavior?

Generate tokens with different validity time.

Environment

Nest version: 5.2.1

 
For Tooling issues:
- Node version: 10.11.0  
- Platform:  Mac

Others:

[erezger]

hello what about two different secret keys? secret key for access token and different secret key for refresh token?

[quangpdt]

A simple implementation can help you on this without module support:

Install jsonwebtoken package and its type definition:

npm i jsonwebtoken  
npm i -D @types/jsonwebtoken

Implement the refresh token like these:

import * as jwt from 'jsonwebtoken';

public createToken({ id, email, role }: UserModel) {
    const user = { id, email, role };
    const token = this.jwtService.sign(user);
    const refreshToken = jwt.sign(user, refreshTokenSecretKey, { expiresIn: '14d' });
    return {
        expires_in: expiresIn,
        access_token: token,
        refresh_token: refreshToken,
    };
}

Hope this help!