Function refreshTokenAction

packages/auth-server/src/server/tokens.ts:70–94

(req: any, res: any)

// let usedTokens: Record<string, boolean> = {};

export async function refreshTokenAction(req: any, res: any) {
  const token = getToken(req);
  if (!token) {
    throw new Error('Token not found');
  }

  // if (usedTokens[token]) {
  //   throw new Error('Token already used');
  // }

  const isValid = (await verifyToken(token)) as JwtPayload;
  const newToken = await signToken(isValid.data);

  // TODO: add refreshToken used on some external black-list
  // usedTokens[token] = true;

  // persist cookies for SSR
  setSessionCookies({
    token: newToken,
    req,
    res,
  });

  return { newToken };
}