✨ Reply token

pkg/internal/services/events.go

@@ -180,14 +180,16 @@ func NotifyMessageEvent(members []models.ChannelMember, event models.Event) {
 	}
 
 	displayTitle := fmt.Sprintf("%s (%s)", event.Sender.Nick, event.Channel.DisplayText())
+	replyToken, err := CreateReplyToken(event.ID, event.Sender.AccountID)
 
 	metadata := map[string]any{
-		"avatar":     event.Sender.Avatar,
-		"user_id":    event.Sender.AccountID,
-		"user_name":  event.Sender.Name,
-		"user_nick":  event.Sender.Nick,
-		"channel_id": event.ChannelID,
-		"event_id":   event.ID,
+		"avatar":      event.Sender.Avatar,
+		"user_id":     event.Sender.AccountID,
+		"user_name":   event.Sender.Name,
+		"user_nick":   event.Sender.Nick,
+		"channel_id":  event.ChannelID,
+		"event_id":    event.ID,
+		"reply_token": replyToken,
 	}
 
 	if len(pendingUsers) > 0 {

pkg/internal/services/reply_token.go

@@ -0,0 +1,50 @@
+package services
+
+import (
+	"fmt"
+	"time"
+
+	"github.com/golang-jwt/jwt/v5"
+	"github.com/spf13/viper"
+)
+
+type ReplyClaims struct {
+	UserID  uint `json:"user_id"`
+	EventID uint `json:"event_id"`
+	jwt.RegisteredClaims
+}
+
+func CreateReplyToken(eventId uint, userId uint) (string, error) {
+	claims := ReplyClaims{
+		UserID:  userId,
+		EventID: eventId,
+		RegisteredClaims: jwt.RegisteredClaims{
+			Issuer:    "messaging",
+			ExpiresAt: jwt.NewNumericDate(time.Now().Add(time.Hour * 24 * 7)),
+		},
+	}
+
+	token := jwt.NewWithClaims(jwt.SigningMethodHS512, claims)
+	tks, err := token.SignedString([]byte(viper.GetString("security.reply_token_secret")))
+	if err != nil {
+		return "", fmt.Errorf("failed to sign token: %v", err)
+	}
+	return tks, nil
+}
+
+func ParseReplyToken(tk string) (ReplyClaims, error) {
+	var claims ReplyClaims
+	token, err := jwt.ParseWithClaims(tk, &claims, func(token *jwt.Token) (interface{}, error) {
+		if _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok {
+			return nil, fmt.Errorf("unexpected signing method: %v", token.Method)
+		}
+		return []byte(viper.GetString("security.reply_token_secret")), nil
+	})
+	if err != nil {
+		return claims, err
+	}
+	if !token.Valid {
+		return claims, fmt.Errorf("invalid token")
+	}
+	return claims, nil
+}