import { decodeToken } from 'camarauth-sdk';

const token = 'eyJhbGciOiJIUzI1NiIs...';
const payload = decodeToken(token);

console.log(payload);
// {
//   userId: '123',
//   name: 'Juan',
//   roles: ['user'],
//   iat: 1234567890,
//   exp: 1234567950
// }

import { isTokenExpired } from 'camarauth-sdk';

const token = 'eyJhbGciOiJIUzI1NiIs...';

if (isTokenExpired(token)) {
  console.log('Token expirado');
  // Usar refresh token
} else {
  console.log('Token válido');
}

import { getUserFromToken } from 'camarauth-sdk';

const token = 'eyJhbGciOiJIUzI1NiIs...';
const user = getUserFromToken(token);

console.log(user);
// {
//   id: '123',
//   name: 'Juan',
//   email: 'juan@example.com',
//   roles: ['user']
// }

interface JWTPayload {
  // Datos del usuario
  userId: string;
  name: string;
  email?: string;
  roles: string[];
  
  // Metadatos
  iat: number;    // Issued at (timestamp)
  exp: number;    // Expiration (timestamp)
  iss: string;    // Issuer (camarauth)
  aud: string;    // Audience (camarauth-client)
  jti?: string;   // JWT ID (para refresh tokens)
}

interface RefreshTokenPayload {
  userId: string;
  type: 'refresh';
  jti: string;      // ID único del token
  iat: number;
  exp: number;      // Expira en 7 días
}

import { getUserFromToken, isTokenExpired } from 'camarauth-sdk';

// Al cargar la aplicación
const token = localStorage.getItem('token');

if (token && !isTokenExpired(token)) {
  const user = getUserFromToken(token);
  // Usuario autenticado
  setUser(user);
} else {
  // Token expirado o no existe
  // Intentar refresh o redirigir a login
}

// ❌ No verifica firma (client-side)
const payload = decodeToken(token);

// ✅ Verifica firma (server-side)
const payload = jwt.verify(token, secret);