defmodule BtrzAuth.Guardian do
  @moduledoc false
  use Guardian,
    otp_app: :btrz_ex_auth_api,
    issuer: "btrz-api-client"

  def subject_for_token(resource, _claims) when resource == %{} do
    # encode_and_sign callback
    # You can use any value for the subject of your token but
    # it should be useful in retrieving the resource later, see
    # how it being used on `resource_from_claims/1` function.
    # A unique `id` is a good subject, a non-unique email address
    # is a poor subject.
    {:ok, %{}}
  end

  def subject_for_token(_, _) do
    {:error, :invalid_resource}
  end

  def resource_from_claims(claims) do
    # for plug LoadResource
    # Here we'll look up our resource from the claims, the subject can be
    # found in the `"sub"` key. In `above subject_for_token/2` we returned
    # the resource id so here we'll rely on that to look it up.
    resource = claims["sub"]
    {:ok, resource}
  end

  # def resource_from_claims(_claims) do
  #   {:error, :reason_for_error}
  # end
end