Verify HelpAlive users with a signed JWT user token

# pip install PyJWT
import os
import jwt

user_token = jwt.encode(
    {
        "sub": str(user.id),  # this person's id in your app
        # Optional: delete the next line if your app has no companies or workspaces.
        "tenant": str(user.company_id),  # their company or workspace id
    },
    os.environ["HELPALIVE_SIGNING_SECRET"],
    algorithm="HS256",
)

# gem install jwt  (or add gem "jwt" to your Gemfile)
require "jwt"

user_token = JWT.encode(
  {
    sub: user.id.to_s, # this person's id in your app
    # Optional: delete the next line if your app has no companies or workspaces.
    tenant: user.company_id.to_s, # their company or workspace id
  },
  ENV.fetch("HELPALIVE_SIGNING_SECRET"),
  "HS256"
)

// composer require firebase/php-jwt
use Firebase\JWT\JWT;

$userToken = JWT::encode(
    [
        'sub' => (string) $user->id, // this person's id in your app
        // Optional: delete the next line if your app has no companies or workspaces.
        'tenant' => (string) $user->company_id, // their company or workspace id
    ],
    getenv('HELPALIVE_SIGNING_SECRET'),
    'HS256'
);

// Maven: com.auth0:java-jwt
import com.auth0.jwt.JWT;
import com.auth0.jwt.algorithms.Algorithm;

String userToken = JWT.create()
    .withSubject(String.valueOf(user.getId())) // this person's id in your app
    // Optional: delete the next line if your app has no companies or workspaces.
    .withClaim("tenant", String.valueOf(user.getCompanyId())) // their company or workspace id
    .sign(Algorithm.HMAC256(System.getenv("HELPALIVE_SIGNING_SECRET")));

// go get github.com/golang-jwt/jwt/v5
import (
	"os"

	"github.com/golang-jwt/jwt/v5"
)

userToken, err := jwt.NewWithClaims(jwt.SigningMethodHS256, jwt.MapClaims{
	"sub": user.ID, // this person's id in your app, as a string
	// Optional: delete the next line if your app has no companies or workspaces.
	"tenant": user.CompanyID, // their company or workspace id, as a string
}).SignedString([]byte(os.Getenv("HELPALIVE_SIGNING_SECRET")))

// dotnet add package Microsoft.IdentityModel.JsonWebTokens
using System;
using System.Collections.Generic;
using System.Text;
using Microsoft.IdentityModel.JsonWebTokens;
using Microsoft.IdentityModel.Tokens;

var secret = Environment.GetEnvironmentVariable("HELPALIVE_SIGNING_SECRET")!;
var handler = new JsonWebTokenHandler { SetDefaultTimesOnTokenCreation = false };
var userToken = handler.CreateToken(new SecurityTokenDescriptor
{
    Claims = new Dictionary<string, object>
    {
        ["sub"] = user.Id.ToString(), // this person's id in your app
        // Optional: delete the next line if your app has no companies or workspaces.
        ["tenant"] = user.CompanyId.ToString(), // their company or workspace id
    },
    SigningCredentials = new SigningCredentials(
        new SymmetricSecurityKey(Encoding.UTF8.GetBytes(secret)), SecurityAlgorithms.HmacSha256),
});

// npm install jose  (Vercel Edge, Cloudflare Workers, Deno, Bun)
import { SignJWT } from "jose"

const userToken = await new SignJWT({
  sub: String(user.id), // this person's id in your app
  // Optional: delete the next line if your app has no companies or workspaces.
  tenant: String(user.companyId), // their company or workspace id
})
  .setProtectedHeader({ alg: "HS256" })
  // On Cloudflare Workers, read the secret from env instead of process.env
  .sign(new TextEncoder().encode(process.env.HELPALIVE_SIGNING_SECRET))