forgot stuff

This commit is contained in:
Rene Kievits
2025-10-27 06:10:53 +01:00
parent 150667f781
commit 96458b9e94
2 changed files with 5 additions and 7 deletions

View File

@@ -14,7 +14,7 @@ function createAccessToken(user: any) {
return jwt.sign(
{ sub: user._id, role: user.role },
ACCESS_TOKEN_SECRET,
{ expiresIn: '15m' },
{ expiresIn: '7d' },
)
}
@@ -53,7 +53,9 @@ router.post('/login', async (req: Request, res: Response) => {
res.cookie('access_token', accessToken, {
httpOnly: true, sameSite: 'lax', secure: process.env.NODE_ENV !== 'dev', maxAge: 7 * 24 * 60 * 60 * 1000,
})
const refreshMaxAge = remember > 7 ? 365 * 24 * 60 * 60 * 1000 : 7 * 24 * 60 * 60 * 1000
const refreshMaxAge = remember
? 365 * 24 * 60 * 60 * 1000
: 7 * 24 * 60 * 60 * 1000
res.cookie('refreshToken', refreshToken, {
httpOnly: true, sameSite: 'lax', secure: process.env.NODE_ENV !== 'dev', maxAge: refreshMaxAge,
@@ -79,7 +81,7 @@ router.post('/refresh', async (req: Request, res: Response) => {
try {
const payload = jwt.verify(token, REFRESH_TOKEN_SECRET) as any
const user = await UserModel.findById(payload.sub)
const user = await UserModel.findById(payload.id)
if (!user || user.refreshToken !== token)
return res.status(403).json({ error: 'Invalid refresh token' })