[Auth] Update to call uuidv4 to generate jti (thirdweb-dev#1812)

zdeadex · Oct 20, 2023 · c238fde · c238fde
1 parent 5486019
commit c238fde
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 2 deletions.
diff --git a/.changeset/funny-eels-watch.md b/.changeset/funny-eels-watch.md
@@ -0,0 +1,5 @@
+---
+"@thirdweb-dev/auth": patch
+---
+
+Update to call uuidv4 to generate jti
diff --git a/.changeset/wise-boats-perform.md b/.changeset/wise-boats-perform.md
@@ -0,0 +1,5 @@
+---
+"@thirdweb-dev/auth": patch
+---
+
+Update to use uuidv4 for default jti
diff --git a/packages/auth/src/core/schema/authenticate.ts b/packages/auth/src/core/schema/authenticate.ts
@@ -9,7 +9,7 @@ export const AuthenticationPayloadDataSchema = z.object({
   exp: RawDateSchema,
   nbf: RawDateSchema,
   iat: RawDateSchema,
-  jti: z.string().default(uuidv4()),
+  jti: z.string().default(() => uuidv4()),
   ctx: JsonSchema.optional(),
 });
 

diff --git a/packages/auth/src/core/schema/login.ts b/packages/auth/src/core/schema/login.ts
@@ -44,7 +44,7 @@ export const LoginPayloadDataSchema = z.object({
   uri: z.string().optional(),
   version: z.string().default("1"),
   chain_id: z.string().optional(),
-  nonce: z.string().default(uuidv4()),
+  nonce: z.string().default(() => uuidv4()),
   issued_at: z
     .date()
     .default(new Date())