Add a JWT-based LDAP/AD authenticator.

lib/util/jwtutil.js

@@ -0,0 +1,33 @@
+var assert = require('assert')
+var jws = require('jws')
+
+module.exports.encode = function(options) {
+  assert.ok(options.payload, 'payload required')
+  assert.ok(options.secret, 'secret required')
+
+  return jws.sign({
+    header: {
+      alg: 'HS256'
+    , exp: Date.now() + 24 * 3600
+    }
+  , payload: options.payload
+  , secret: options.secret
+  })
+}
+
+module.exports.decode = function(payload, secret) {
+  if (!jws.verify(payload, secret)) {
+    return null
+  }
+
+  var decoded = jws.decode(payload, {
+        json: true
+      })
+    , exp = decoded.header.exp
+
+  if (exp && exp <= Date.now()) {
+    return null
+  }
+
+  return decoded.payload
+}