refactor: idToken.issue() now requires the use option

BREAKING CHANGE: `IdToken.prototype.issue` now requires the `use`
option.

Author: panva

lib/models/formats/paseto.js

@@ -121,7 +121,7 @@ module.exports = (provider, { opaque }) => {
       if (config.version === 1) {
         issue = config.purpose === 'local' ? paseto.V1.encrypt : paseto.V1.sign;
       } else {
-        issue = config.purpose === 'local' ? paseto.V2.encrypt : paseto.V2.sign;
+        issue = paseto.V2.sign;
       }
 
       /* eslint-disable no-unused-expressions */

lib/models/id_token.js

@@ -62,7 +62,7 @@ module.exports = function getIdToken(provider) {
       return merge({}, await mask.result(), this.extra);
     }
 
-    async issue({ use = 'idtoken', expiresAt = null } = {}) {
+    async issue({ use, expiresAt = null } = {}) {
       const { client } = this;
       const expiresIn = expiresAt ? expiresAt - epochTime() : undefined;
       let alg;

test/formats/paseto.test.js

@@ -78,7 +78,7 @@ describe('paseto format', () => {
 
       const client = await this.provider.Client.find(clientId);
       const token = new this.provider.AccessToken({ client, ...fullPayload, resourceServer });
-      expect(await token.save()).to.match(/^v1.public./);
+      expect(await token.save()).to.match(/^v1\.public\./);
     });
 
     it('v2.public', async function () {
@@ -93,7 +93,7 @@ describe('paseto format', () => {
 
       const client = await this.provider.Client.find(clientId);
       const token = new this.provider.AccessToken({ client, ...fullPayload, resourceServer });
-      expect(await token.save()).to.match(/^v2.public./);
+      expect(await token.save()).to.match(/^v2\.public\./);
     });
 
     it('v1.local', async function () {
@@ -109,7 +109,7 @@ describe('paseto format', () => {
 
       const client = await this.provider.Client.find(clientId);
       const token = new this.provider.AccessToken({ client, ...fullPayload, resourceServer });
-      expect(await token.save()).to.match(/^v1.local./);
+      expect(await token.save()).to.match(/^v1\.local\./);
     });
 
     it('v1.local (keyObject)', async function () {
@@ -125,7 +125,7 @@ describe('paseto format', () => {
 
       const client = await this.provider.Client.find(clientId);
       const token = new this.provider.AccessToken({ client, ...fullPayload, resourceServer });
-      expect(await token.save()).to.match(/^v1.local./);
+      expect(await token.save()).to.match(/^v1\.local\./);
     });
 
     it('v2.local is not supported', async function () {