var jwt = require('jsonwebtoken')

module.exports = {

  issue: function(payload) {
    sails.log.silly(__filename + ':' + __line + ' [Service.Passport.deserializeUser() called]')
    return jwt.sign(payload, sails.config.jwt.secret)
  },

  verify: function(token, next) {
    return jwt.verify(token, sails.config.jwt.secret, {}, next)
  },

  getToken: function(req, next, throwError) {
    var token = ''
    if (req.headers && req.headers.authorization) {
      var parts = req.headers.authorization.split(' ')
      if (parts.length === 2) {
        var scheme = parts[0]
        var credentials = parts[1]
        if (/^Bearer$/i.test(scheme)) {
          token = credentials
        }
      } else if (throwError) {
        throw new Error('Invalid authorization header format. Format is Authorization: Bearer [token]')
      }
    } else if (req.param('token')) {
      token = req.param('token')
    } else if (throwError) {
      throw new Error('No authorization header was found')
    }
    return sails.services['token'].verify(token, next)
  }
}