func (a *JwtGuard) Refresh() (token string, err error) {
	auth, ok := a.ctx.Value(ctxKey).(Guards)
	if !ok || auth[a.guard] == nil {
		return "", errors.AuthParseTokenFirst
	}

	guard, ok := auth[a.guard]
	if !ok {
		return "", errors.AuthParseTokenFirst
	}

	if guard.Claims == nil {
		return "", errors.AuthParseTokenFirst
	}

	nowTime := carbon.Now()
	refreshTtl := a.config.GetInt("jwt.refresh_ttl")
	if refreshTtl == 0 {
		// 100 years
		refreshTtl = 60 * 24 * 365 * 100
	}

	expireTime := carbon.FromStdTime(guard.Claims.ExpiresAt.Time).AddMinutes(refreshTtl)
	if nowTime.Gt(expireTime) {
		return "", errors.AuthRefreshTimeExceeded
	}

	token, err = a.LoginUsingID(guard.Claims.Key)

	if err != nil {
		return "", err
	}

	return
}

func (r *JwtGuard) Refresh() (token string, err error) {
	guard, err := r.GetAuthToken()

	if err != nil {
		return "", err
	}

	nowTime := carbon.Now()
	refreshTtl := r.config.GetInt("jwt.refresh_ttl")
	if refreshTtl == 0 {
		// 100 years
		refreshTtl = 60 * 24 * 365 * 100
	}

	expireTime := carbon.FromStdTime(guard.Claims.ExpiresAt.Time).AddMinutes(refreshTtl)
	if nowTime.Gt(expireTime) {
		return "", errors.AuthRefreshTimeExceeded
	}

	token, err = r.LoginUsingID(guard.Claims.Key)

	if err != nil {
		return "", err
	}

	return
}

func (r *JwtGuard) GetAuthToken() (*AuthToken, error) {
	guards, ok := r.ctx.Value(ctxKey).(Guards)
	if !ok {
		return nil, ErrorParseTokenFirst
	}

	return r.authToken(guards)
}

func (r *JwtGuard) authToken(guards Guards) (*AuthToken, error) {
	guard, ok := guards[r.guard]
	if !ok || guard == nil {
		return nil, ErrorParseTokenFirst
	}

	if guard.Claims == nil {
		return nil, errors.AuthParseTokenFirst
	}

	if guard.Claims.Key == "" {
		return nil, errors.AuthInvalidKey
	}

	if guard.Token == "" {  // <-- Since reusing the code, checking the token is required for other func
		return nil, errors.AuthTokenExpired
	}

	return guard, nil
}