Function tryRefreshTokens

apps/client/src/code/auth/refresh.ts:26–175

()

const moduleLogger = mainLogger.sub('auth/refresh.client.ts');

export async function tryRefreshTokens(): Promise<void> {
  moduleLogger.info('Trying to refresh tokens');

  if (!authStore().loggedIn) {
    moduleLogger.info(
      'authStore().loggedIn is false, skipping refresh request',
    );
    return;
  }

  // Logout if a requirement is not met

  if (
    !isClientTokenValid('refresh') ||
    internals.storage.getItem('encryptedPrivateKeyring') == null ||
    internals.storage.getItem('encryptedSymmetricKeyring') == null
  ) {
    moduleLogger.info('Requirements not met, logging out');
    await logout();
    return;
  }

  // Skip refresh if unnecessary

  if (
    internals.keyPair != null &&
    internals.symmetricKeyring != null &&
    !areClientTokensExpiring()
  ) {
    moduleLogger.info('Tokens are not expiring, skipping refresh request');
    return;
  }

  // Try to refresh tokens

  try {
    let oldSessionKey: SymmetricKey;
    let newSessionKey: SymmetricKey;

    if (authStore().oldSessionKey && authStore().newSessionKey) {
      moduleLogger.info(
        'Tokens already refreshed on server, skipping refresh request',
      );

      oldSessionKey = wrapSymmetricKey(
        base64ToBytes(authStore().oldSessionKey),
      );
      newSessionKey = wrapSymmetricKey(
        base64ToBytes(authStore().newSessionKey),
      );
    } else {
      moduleLogger.info('Sending refresh request');

      const response = await trpcClient.sessions.refresh.mutate(undefined);

      oldSessionKey = wrapSymmetricKey(response.oldSessionKey);
      newSessionKey = wrapSymmetricKey(response.newSessionKey);
    }