1st push

pages/api/refreshtoken.js

@@ -0,0 +1,35 @@
+import { issueAccessToken, verifyRefreshToken } from "../../utils/auth"
+
+// Example middleware to attach access token to outgoing requests
+async function attachAccessToken(req, res, next) {
+  const accessToken = req.cookies.accessToken
+  if (!accessToken) {
+    return res.status(401).json({ message: "Access token missing" })
+  }
+
+  // You might want to check token expiration here and refresh if necessary
+
+  req.headers.Authorization = `Bearer ${accessToken}`
+  next()
+}
+
+export default async function handler(req, res) {
+  if (req.method !== "POST") {
+    return res.status(405).json({ message: "Method Not Allowed" })
+  }
+
+  const { refreshToken } = req.body
+
+  try {
+    const decoded = await verifyRefreshToken(refreshToken.value)
+    // Check if refresh token is valid, then issue a new access token
+    const accessToken = await issueAccessToken(decoded.userId)
+    console.log("aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa")
+    res.setHeader("Set-Cookie", [`token=${accessToken};  Path=/; HttpOnly`])
+
+    return res.status(200).json({ accessToken })
+  } catch (error) {
+    console.error("Error refreshing token:", error)
+    return res.status(401).json({ message: "Invalid refresh token" })
+  }
+}