forgot stuff
This commit is contained in:
@@ -14,7 +14,7 @@ function createAccessToken(user: any) {
|
||||
return jwt.sign(
|
||||
{ sub: user._id, role: user.role },
|
||||
ACCESS_TOKEN_SECRET,
|
||||
{ expiresIn: '15m' },
|
||||
{ expiresIn: '7d' },
|
||||
)
|
||||
}
|
||||
|
||||
@@ -53,7 +53,9 @@ router.post('/login', async (req: Request, res: Response) => {
|
||||
res.cookie('access_token', accessToken, {
|
||||
httpOnly: true, sameSite: 'lax', secure: process.env.NODE_ENV !== 'dev', maxAge: 7 * 24 * 60 * 60 * 1000,
|
||||
})
|
||||
const refreshMaxAge = remember > 7 ? 365 * 24 * 60 * 60 * 1000 : 7 * 24 * 60 * 60 * 1000
|
||||
const refreshMaxAge = remember
|
||||
? 365 * 24 * 60 * 60 * 1000
|
||||
: 7 * 24 * 60 * 60 * 1000
|
||||
|
||||
res.cookie('refreshToken', refreshToken, {
|
||||
httpOnly: true, sameSite: 'lax', secure: process.env.NODE_ENV !== 'dev', maxAge: refreshMaxAge,
|
||||
@@ -79,7 +81,7 @@ router.post('/refresh', async (req: Request, res: Response) => {
|
||||
|
||||
try {
|
||||
const payload = jwt.verify(token, REFRESH_TOKEN_SECRET) as any
|
||||
const user = await UserModel.findById(payload.sub)
|
||||
const user = await UserModel.findById(payload.id)
|
||||
if (!user || user.refreshToken !== token)
|
||||
return res.status(403).json({ error: 'Invalid refresh token' })
|
||||
|
||||
|
||||
Reference in New Issue
Block a user