libsecret

Secret generation, JWT signing, and .env file management for services and CLIs.

Getting Started

import {
  generateSecret,
  generateUUID,
  generateJWT,
  mintSupabaseJwt,
  mintSupabaseAnonKey,
  mintSupabaseServiceRoleKey,
} from '@forwardimpact/libsecret';

• mintSupabaseJwt({ email, secret, ttlSeconds }) — per-caller HS256 token signed against the Supabase JWT secret.
• mintSupabaseAnonKey({ secret }) — long-lived role: anon token that Supabase Auth's anon-keyed clients use.
• mintSupabaseServiceRoleKey({ secret }) — long-lived role: service_role token for admin operations against Supabase.