Refresh accessToken

src/controllers/auth.ts

@@ -1,7 +1,8 @@
 import { Request, Response } from 'express'
-import { asyncHandler, successResponse } from '../utils'
+import { asyncHandler, errorResponse, successResponse } from '../utils'
 import { userService, authService, tokenService } from '../services'
 import { User } from '@prisma/client'
+import { isAfter } from 'date-fns'
 
 async function handleTokens(user: User, res: Response) {
   const { token, refreshToken } = await tokenService.generateAuthTokens(user)
@@ -52,3 +53,30 @@ export const logout = asyncHandler(async (req: Request, res: Response) => {
   })
   return successResponse(res, null, 200)
 })
+
+export const refresh = asyncHandler(async (req: Request, res: Response) => {
+  const cookies = req.cookies
+  if (!cookies?.refreshToken) {
+    return errorResponse(res, null, 401, 'Unauthorized')
+  }
+  const refreshToken = cookies.refreshToken as string
+  res.clearCookie('refreshToken', {
+    httpOnly: true,
+    secure: process.env.NODE_ENV === 'production',
+  })
+  const foundToken = await tokenService.getTokenInfo(refreshToken)
+  if (!foundToken) {
+    return errorResponse(res, null, 401, 'Unauthorized')
+  }
+  const tokenExpired = isAfter(new Date(), foundToken.expires)
+  if (tokenExpired) {
+    return errorResponse(res, null, 401, 'Unauthorized')
+  }
+
+  const user = await userService.getUserById(foundToken.userId)
+  if (!user) {
+    return errorResponse(res, null, 401, 'Unauthorized')
+  }
+  const token = await handleTokens(user, res)
+  successResponse(res, { token }, 200)
+})

src/routes/v1/auth.ts

@@ -17,6 +17,8 @@ router.post(
   authController.login,
 )
 
-router.post('/logout', authController.logout)
+router.get('/logout', authController.logout)
+
+router.get('/refresh', authController.refresh)
 
 export default router

src/services/user.ts

@@ -31,3 +31,16 @@ export const getUserByEmail = async (email: string) => {
     throw new Error('get user failed')
   }
 }
+
+export const getUserById = async (id: string) => {
+  try {
+    const user = await prisma.user.findUnique({
+      where: {
+        id,
+      },
+    })
+    return user
+  } catch (_err: unknown) {
+    throw new Error('get user failed')
+  }
+}