TAN-5763 JWT token data tool

back/app/services/user_service.rb

@@ -63,5 +63,11 @@ def update_in_tenant_template!(user, user_params = {})
       user.confirm
       user.save!
     end
+
+    def jwt_token(user)
+      payload = user.to_token_payload
+      payload[:exp] = 30.minutes.from_now.to_i
+      AuthToken::AuthToken.new(payload:).token
+    end
   end
 end

back/engines/commercial/admin_api/app/controllers/admin_api/users_controller.rb

@@ -29,6 +29,12 @@ def show
       render json: @user
     end
 
+    def jwt_token
+      user = User.find(params[:id])
+      json = { jwt_token: UserService.jwt_token(user) }
+      render json: json
+    end
+
     def create
       user = UserService.create_in_admin_api(user_params, confirm_user?)
 

back/engines/commercial/admin_api/config/routes.rb

@@ -18,6 +18,7 @@
 
   resources :users, only: %i[index create update show] do
     get :by_email, on: :collection
+    get :jwt_token, on: :member
     delete :bulk_delete_by_emails, on: :collection
   end
 

back/engines/commercial/admin_api/spec/acceptance/users_spec.rb

@@ -48,6 +48,31 @@
     end
   end
 
+  get 'admin_api/users/:id/jwt_token' do
+    let(:id) { user.id }
+
+    example 'Get JWT token for a user' do
+      freeze_time = Time.zone.parse('2023-01-01 12:00:00')
+      travel_to(freeze_time) do
+        do_request
+      end
+
+      expect(status).to eq 200
+      jwt_token = json_parse(response_body)[:jwt_token]
+
+      # Test JWT structure (payloads starting with "{" will always start with "eyJ" when encoded)
+      expect(jwt_token).to match(/\AeyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\z/)
+
+      # Test the decoded payload
+      payload, header = JWT.decode(jwt_token, nil, false)
+      expect(header['alg']).to be_present
+      expect(payload).to include(
+        'sub' => id,
+        'exp' => (freeze_time + 30.minutes).to_i
+      )
+    end
+  end
+
   delete 'admin_api/users/bulk_delete_by_emails', active_job_inline_adapter: true do
     parameter :emails, 'Array of user emails'