# `Rivet.Auth.Token.Access`
[🔗](https://github.com/srevenant/rivet-ident/blob/main/lib/auth/token/access.ex#L1)

# `jwt`

```elixir
@spec jwt(
  target :: Rivet.Ident.Factor.t(),
  hostname :: String.t(),
  testing_only_expiration_offset :: nil | integer()
) :: {:ok, token :: String.t(), claims :: map()}
```

Generate an auth JWT to our specification

```
iex> alias Rivet.Ident.Factor
iex> {:ok, token, claims} = jwt(%Factor{id: "AB", details: %{type: "acc"}}, "example.com", 5*60)
iex> claims.aud
"caa1:acc:example.com"
iex> claims.sub
"cas1:AB"
iex> String.slice(token, 0..1)
"ey"

iex> {:ok, token, claims} = jwt("narf", "example.com", 5*60)
iex> claims.aud
"caa1:acc:example.com"
iex> claims.sub
"cas1:narf"
iex> String.slice(token, 0..1)
"ey"

iex> {:ok, "ey" <> _rest, %{sub: "cas1:userid"}} = jwt("userid", "hostname")
```

---

*Consult [api-reference.md](api-reference.md) for complete listing*