Function refreshAccessToken

packages/core/src/auth.ts:752–808

(discord: Account)

	}

	export async function refreshAccessToken(discord: Account) {
		if (!discord.refresh_token) {
			throw new Error('No refresh token');
		}
		const params = new URLSearchParams();
		params.append('client_id', sharedEnvs.DISCORD_CLIENT_ID!);
		params.append('client_secret', sharedEnvs.DISCORD_CLIENT_SECRET!);
		params.append('grant_type', 'refresh_token');
		params.append('refresh_token', discord.refresh_token ?? '');
		try {
			console.log('Fetching new token');
			const inUse = await isRefreshTokenBeingUsed(discord.refresh_token);
			if (inUse) {
				console.log('Token is being used');
				return;
			}
			await setRefreshTokenBeingUsed(discord.refresh_token, true);
			const body = {
				client_id: sharedEnvs.DISCORD_CLIENT_ID!,
				client_secret: sharedEnvs.DISCORD_CLIENT_SECRET!,
				grant_type: 'refresh_token',
				refresh_token: discord.refresh_token ?? '',
			};
			const res = await fetch('https://discord.com/api/v10/oauth2/token', {
				method: 'POST',
				body: JSON.stringify(body),
				headers: {
					'Content-Type': 'application/x-www-form-urlencoded',
				},
			});

			const zAccessTokenResponse = z.object({
				token_type: z.string(),
				access_token: z.string(),
				expires_in: z.number(),
				refresh_token: z.string(),
				scope: z.string(),
			});
			const accessTokenResponse = zAccessTokenResponse.parse(await res.json());
			console.log('Updating token');
			await updateProviderAuthToken({
				provider: 'discord',
				providerAccountId: discord.providerAccountId,
				access_token: accessTokenResponse.access_token,
				expires_at:
					Math.floor(Date.now() / 1000) + accessTokenResponse.expires_in,
				refresh_token: accessTokenResponse.refresh_token,
				scope: accessTokenResponse.scope,
				token_type: accessTokenResponse.token_type,
			});
			await setRefreshTokenBeingUsed(discord.refresh_token, false);
		} catch (error) {
			await setRefreshTokenBeingUsed(discord.refresh_token, false);
			// We're in a bad state so just prompt a re-auth
			await db.delete(dbSessions).where(eq(dbSessions.userId, discord.userId));
		}
	}
}