diff --git a/src/routes/api/auth/refreshToken/+server.ts b/src/routes/api/auth/refreshToken/+server.ts index 7960348..5a01c85 100644 --- a/src/routes/api/auth/refreshToken/+server.ts +++ b/src/routes/api/auth/refreshToken/+server.ts @@ -1,4 +1,6 @@ import { error, text } from "@sveltejs/kit"; +import ms from "ms"; +import env from "$lib/server/loadenv"; import { refreshToken as doRefreshToken } from "$lib/server/services/auth"; import type { RequestHandler } from "./$types"; @@ -9,10 +11,12 @@ export const POST: RequestHandler = async ({ cookies }) => { const { accessToken, refreshToken } = await doRefreshToken(token); cookies.set("accessToken", accessToken, { path: "/", + maxAge: ms(env.jwt.accessExp) / 1000, sameSite: "strict", }); cookies.set("refreshToken", refreshToken, { path: "/api/auth", + maxAge: ms(env.jwt.refreshExp) / 1000, sameSite: "strict", }); diff --git a/src/routes/api/auth/upgradeToken/verify/+server.ts b/src/routes/api/auth/upgradeToken/verify/+server.ts index 84f8e82..8abc130 100644 --- a/src/routes/api/auth/upgradeToken/verify/+server.ts +++ b/src/routes/api/auth/upgradeToken/verify/+server.ts @@ -1,4 +1,6 @@ import { error, text } from "@sveltejs/kit"; +import ms from "ms"; +import env from "$lib/server/loadenv"; import { tokenUpgradeVerifyRequest } from "$lib/server/schemas/auth"; import { upgradeToken } from "$lib/server/services/auth"; import type { RequestHandler } from "./$types"; @@ -19,10 +21,12 @@ export const POST: RequestHandler = async ({ request, cookies, getClientAddress ); cookies.set("accessToken", accessToken, { path: "/", + maxAge: ms(env.jwt.accessExp) / 1000, sameSite: "strict", }); cookies.set("refreshToken", refreshToken, { path: "/api/auth", + maxAge: ms(env.jwt.refreshExp) / 1000, sameSite: "strict", });