code: func (t *TokenProvider) GetToken(audience string) (*auth.Token, error) {
  	signature, expiry := t.signer.SignWithDuration(audience, 2*time.Hour)
  	return auth.NewToken(auth.CBSTokenTypeSAS, signature, expiry), nil
  }
docs: // GetToken gets a CBS SAS token