Encrypt Payload

sign.ts

import { PKCS8 } from '$env/static/private';
import { COOKIE_HOST, audience, issuer } from '$lib/constants';
import { SignJWT, importPKCS8, type JWTPayload } from 'jose';

const forPrivateKey = importPKCS8(PKCS8, 'RS512');

export const sign = async <T extends JWTPayload>(data: T) =>
	new SignJWT(data)
		.setProtectedHeader({ alg: 'RS512' })
		.setIssuedAt()
		.setIssuer(issuer)
		.setAudience(audience)
		.setExpirationTime('30d')
		.sign(await forPrivateKey);