Function refresh

apps/app-server/src/trpc/api/sessions/refresh.ts:14–88

({
  ctx,
}: InferProcedureOpts<typeof baseProcedure>)

export const refreshProcedure = once(() => baseProcedure.mutation(refresh));

export async function refresh({
  ctx,
}: InferProcedureOpts<typeof baseProcedure>) {
  // Check if loggedIn cookie exists

  if (ctx.req.cookies.loggedIn == null) {
    throw new TRPCError({
      message: 'User not logged in.',
      code: 'UNAUTHORIZED',
    });
  }

  // Check if refresh token exists

  if (ctx.req.cookies.refreshToken == null) {
    throw new TRPCError({
      message: 'No refresh token received.',
      code: 'UNAUTHORIZED',
    });
  }

  // Verify JWT

  let jwtPayload = verifyRefreshJWT<RefreshTokenPayload>(
    ctx.req.cookies.refreshToken,
  );

  if (jwtPayload == null) {
    jwtPayload = decodeRefreshJWT<RefreshTokenPayload>(
      ctx.req.cookies.refreshToken,
    );

    if (jwtPayload != null) {
      await ctx.dataAbstraction.patch('session', jwtPayload.sid, {
        invalidated: true,
      });
    }

    throw new TRPCError({
      message: 'Invalid refresh token.',
      code: 'UNAUTHORIZED',
    });
  }

  // Get session data

  const session = await SessionModel.query()
    .where('refresh_code', jwtPayload.rfc)
    .first();

  // Check if session is valid

  if (
    session == null ||
    session.invalidated ||
    new Date() > session.expiration_date
  ) {
    throw new TRPCError({