Set up Server

import { stringify as uuidStringify } from 'uuid';
import crypto from 'node:crypto';

const [prefix, encodedId, key] = apiKey.split('.'); // prefix is just VRTX
const id = uuidStringify(Buffer.from(encodedId, 'base64url'));
const signingKey = crypto.createHmac('sha256', key)
  .update(id)
  .digest(); // <- raw Buffer

type header {
	alg: string;
	typ: string;
	kid: string;
}

type payload {
	userIdentifier: string;
	groups: { groupType: string, groupName: string, groupId: string }[];
	Role: string;
	expires: number;
	identifiers: { type: string, value: string }[];
}

const userId = ‘55bab438-0492-4dd6-868b-fc93b5b06e32’; // should be the id of the user in your service
const groups = [ // fetch this from your database in a real-world use case
	{
		type: ‘workspace’, // a name for the different group types the Vortex customer’s system has
		name: ‘Acme Co’, // the name of this particular group
		id: ‘5cff5e56-b15b-4104-813e-0d1597c26285’ // the id of the group in the Vortex customer’s system
	},
	{
		type: ‘workspace’,
		name: ‘Foobar Inc’,
		id: ‘eec18848-14cf-4726-a0fc-91805361b781’
	},
	{
		type: ‘project’,
		name: ‘Public Launch Project’,
		id: ‘4c14cfa2-3346-4672-b03c-76ba597b4166’
	},
];
const role = ‘admin’;
const expires = Math.floor(Date.now() / 1000) + 3600;
const identifiers = [
	{
		type: ‘email’,
		value: ‘foo@bar.com’
	},
];
const header = {
    iat: Date.now(),
    alg: 'HS256',
    typ: 'JWT',
    kid: id
};
const payload = {
    userId,
    groups,
    role,
    expires,
    identifiers,
};

const headerB64 = Buffer.from(JSON.stringify(header)).toString('base64url');
const payloadB64 = Buffer.from(JSON.stringify(payload)).toString('base64url');

const toSign = `${headerB64}.${payloadB64}`;
const signature = Buffer.from(
	crypto.createHmac('sha256', signingKey).update(toSign).digest()
).toString('base64url');
const token = `${toSign}.${signature}`;