Alexander Lind

questions/Q01.md

@@ -4,3 +4,6 @@ What three components make up a JSON Web Token?
 
 ## Answer
 
+1. Header
+2. Payload
+3. Signature

questions/Q02.md

@@ -4,3 +4,4 @@ What is Base64 and why is it used to construct a JWT?
 
 ## Answer
 
+Base64 allows you to represent 8 bit bytes (0's and 1's) by using digits.

questions/Q03.md

@@ -2,5 +2,7 @@
 
 What two pieces of information are used to construct the signature for a JWT?
 
+
 ## Answer
 
+The encoded header and payload, as well as the "secret" phrase which can be base64 encoded as well.

questions/Q04.md

@@ -27,3 +27,10 @@ Create a JWT for the following and place it in the answer section:
 
 ## Answer
 
+Witout base64 encoded secret:
+
+eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6MTUzLCJ1c2VybmFtZSI6InNhbmNoZXoiLCJlbWFpbCI6InJpY2tAc2FuY2hlei5jb20iLCJyb2xlIjoiQURNSU4ifQ.mEzEZU6ileMd9Uo6k9LMFimIlBpuYuD2pdpP-GHaPmA
+
+With base64 encoded secret:
+
+eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6MTUzLCJ1c2VybmFtZSI6InNhbmNoZXoiLCJlbWFpbCI6InJpY2tAc2FuY2hlei5jb20iLCJyb2xlIjoiQURNSU4ifQ.rwGFsO1cBf4ydtsLkvYv1bWe5ggtyafrXXmQbPlrZm8

src/token.js

@@ -1,34 +1,49 @@
-const jwt = require('jsonwebtoken');
+const jwt = require("jsonwebtoken");
 
 /**
  * Implement this function to accept a payload and a secret key and return a JWT without an expiry time
- * 
+ *
  * Documentation: https://www.npmjs.com/package/jsonwebtoken#jwtsignpayload-secretorprivatekey-options-callback
  */
-function createToken() {
-
+function createToken(payload, secret) {
+  let token = jwt.sign(payload, secret);
+  return token;
 }
 
 /**
  * Implement this function to accept a payload, secret key and an expiry time, and return a JWT with an expiry
- * 
+ *
  * Documentation: https://www.npmjs.com/package/jsonwebtoken#token-expiration-exp-claim
  */
-function createTokenWithExpiry() {
-
+function createTokenWithExpiry(payload, secret, expiry) {
+  let token = jwt.sign(
+    payload,
+    secret,
+    { expiresIn: expiry }
+  );
+  return token;
 }
 
+
 /**
  * Implement this function to accept a JWT and a secret key. Return the decoded token (the payload) if verification is successful, and false if it fails
- * 
+ *
  * Documentation: https://www.npmjs.com/package/jsonwebtoken#jwtverifytoken-secretorpublickey-options-callback
  */
-function verifyToken() {
 
+function verifyToken(token, secret) {
+
+
+    try {
+        let decoded = jwt.verify(token, secret);
+        return decoded
+    } catch (error) {
+        return false;
+    }
 }
 
 module.exports = {
-    createToken,
-    createTokenWithExpiry,
-    verifyToken
-}
+  createToken,
+  createTokenWithExpiry,
+  verifyToken,
+};