When tokens are enabled for a resource, there appears to be no way to customize the signed token with extra claims when using the AshAuthentication.Plug.

I tried manually defining routes for auth, but when I try to create the token manually with AshAuthentication.Jwt.token_for_user, I get duplicate tokens (Because store_all_tokens is true). If I set store_all_tokens? to false, I can manually create a token, but the token doesn’t get stored.

Question is, is it possible to add extra claims to the jwt when using the generated ash plug?

autentication do
    tokens do
        enabled? true
        token_resource AccountsService.Accounts.Token
        signing_secret AccountsService.Accounts.Secrets
        store_all_tokens? true
        require_token_presence_for_authentication? true
        token_lifetime {90, :days}
      end
end