Ability to add metadata to access and refresh tokens

[palmenhq]

Is your feature request related to a problem? Please describe.
I can't pass any metadata along with the access token, i.e. to the token store. Also there's some fields missing that could be useful if one is using JWTs as ATs - such as the jti (token id) and aud (audience).

Describe the solution you'd like
A way to pass metadata, i.e. a String -> Any map on the AT class. Also possibly add an optional id field to the AT, for the use case where your access token isn't an id itself.

Describe alternatives you've considered

• Make the Access Token class open so it can be extended
• Let the access token be an interface rather than a data class

Additional context
Maybe the same for refresh tokens. Possibly also for TokenInfo so metadata can be shown in the token info endpoint? (unsure whether that's desired or not but it sure would be handy)

[adhesivee]

It is possible to implement it, but the metadata can only be provided by AccessTokenConverter or RefreshTokenConverter. Would this fit your use-case?

For jti and aud I am not sure what to fill as defaults. It could be implemented by creating an own JwtBuilder and pass it to JwtAccessTokenConverter

[palmenhq]

@adhesivee Valid point. In my use case it's totally ok for the AccessTokenConverter to generate the jti, which is what i need for now, but moving forward it would of lock me in. A thought that just struck me - wouldn't it make more sense to pass Identity to AccessTokenConverter and let that have metadata also, rather than the username only?

Imo jti and aud could be null by default, since everyone won't use them. My plan is to use client id as aud and that's available in the AT converter as of now.

[adhesivee]

@palmfjord That is a good idea. Identity can be passed to AccessTokenConverter. Identity should also be passed to AccessToken instead of username.

[palmenhq]

@adhesivee sounds very reasonable!

[adhesivee]

Please check #53 if this supports your use-case

[palmenhq]

@adhesivee yup, looks good 👌

[adhesivee]

Fixed with 0.5.0