Authenticating the User

const { SignJWT } = require("jose");

app.post("/referral-program/generate-token", async (req, res) => {
  const SECRET = "YOUR_PRODUCT_SECRET";
  const PRODUCT_ID = "YOUR_PRODUCT_ID";
  const userId = req.body.userId; // e.g., from request payload

  try {
    const secretKey = new TextEncoder().encode(SECRET);
    const token = await new SignJWT({
      ProductId: PRODUCT_ID,
      UserId: userId,
      iat: Math.floor(Date.now() / 1000),
    })
      .setProtectedHeader({ alg: "HS512", typ: "JWT" })
      .sign(secretKey);

    return res.json({ token });
  } catch (error) {
    return res.status(500).json({ error: "Token generation failed" });
  }
});

# config/routes.rb
Rails.application.routes.draw do
  post 'referral-program/tokens', to: 'referral_tokens#create'
end

# app/controllers/referral_tokens_controller.rb
require 'jwt'

class ReferralTokensController < ApplicationController
  def create
    secret     = "YOUR_PRODUCT_SECRET"
    product_id = "YOUR_PRODUCT_ID"
    user_id    = params[:userId]

    payload = {
      ProductId: product_id,
      UserId:    user_id,
      iat:       Time.now.to_i
    }

    token = JWT.encode(payload, secret, 'HS512')
    render json: { token: token }
  end
end

# urls.py
from django.urls import path
from .views import generate_referral_token

urlpatterns = [
    path('referral-program/generate-token/', generate_referral_token, name='generate-referral-token'),
]

# views.py
from django.http import JsonResponse
from django.views.decorators.csrf import csrf_exempt
import jwt
import time

@csrf_exempt
def generate_referral_token(request):
    if request.method == 'POST':
        SECRET      = "YOUR_PRODUCT_SECRET"
        PRODUCT_ID  = "YOUR_PRODUCT_ID"
        user_id     = request.POST.get('userId') or request.GET.get('userId')

        payload = {
            "ProductId": PRODUCT_ID,
            "UserId":    user_id,
            "iat":       int(time.time())
        }

        token = jwt.encode(payload, SECRET, algorithm='HS512')
        return JsonResponse({"token": token})
    return JsonResponse({"error": "Only POST allowed"}, status=405)