add order and payment

internal/repository/crypto/init.go

@@ -20,6 +20,8 @@ func NewCrypto(config CryptoConfig) *CryptoImpl {
 
 type CryptoConfig interface {
 	AccessTokenSecret() string
+	AccessTokenOrderSecret() string
+	AccessTokenOrderExpiresDate() time.Time
 	AccessTokenExpiresDate() time.Time
 }
 
@@ -88,3 +90,46 @@ func (c *CryptoImpl) ParseAndValidateJWT(tokenString string) (*entity.JWTAuthCla
 		return nil, errors.ErrorUnauthorized
 	}
 }
+
+func (c *CryptoImpl) GenerateJWTOrder(order *entity.Order) (string, error) {
+	claims := &entity.JWTOrderClaims{
+		StandardClaims: jwt.StandardClaims{
+			Subject:   strconv.FormatInt(order.ID, 10),
+			ExpiresAt: c.Config.AccessTokenOrderExpiresDate().Unix(),
+			IssuedAt:  time.Now().Unix(),
+			NotBefore: time.Now().Unix(),
+		},
+		PartnerID: order.PartnerID,
+		OrderID:   order.ID,
+	}
+
+	token, err := jwt.
+		NewWithClaims(jwt.SigningMethodHS256, claims).
+		SignedString([]byte(c.Config.AccessTokenOrderSecret()))
+
+	if err != nil {
+		return "", err
+	}
+
+	return token, nil
+}
+
+func (c *CryptoImpl) ValidateJWTOrder(tokenString string) (int64, int64, error) {
+	token, err := jwt.ParseWithClaims(tokenString, &entity.JWTOrderClaims{}, func(token *jwt.Token) (interface{}, error) {
+		if _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok {
+			return nil, fmt.Errorf("unexpected signing method: %v", token.Header["alg"])
+		}
+		return []byte(c.Config.AccessTokenOrderSecret()), nil
+	})
+
+	if err != nil {
+		return 0, 0, err
+	}
+
+	claims, ok := token.Claims.(*entity.JWTOrderClaims)
+	if !ok || !token.Valid {
+		return 0, 0, fmt.Errorf("invalid token %v", token.Header["alg"])
+	}
+
+	return claims.PartnerID, claims.OrderID, nil
+}