mirror of
https://github.com/kmc7468/arkvault.git
synced 2025-12-16 06:58:46 +00:00
Refresh Token 저장 방식 변경
This commit is contained in:
@@ -3,7 +3,7 @@ import { z } from "zod";
|
||||
import { login } from "$lib/server/services/auth";
|
||||
import type { RequestHandler } from "./$types";
|
||||
|
||||
export const POST: RequestHandler = async ({ request }) => {
|
||||
export const POST: RequestHandler = async ({ request, cookies }) => {
|
||||
const zodRes = z
|
||||
.object({
|
||||
email: z.string().email().nonempty(),
|
||||
@@ -14,5 +14,13 @@ export const POST: RequestHandler = async ({ request }) => {
|
||||
if (!zodRes.success) error(400, zodRes.error.message);
|
||||
|
||||
const { email, password, pubKey } = zodRes.data;
|
||||
return json(await login(email.trim(), password.trim(), pubKey?.trim()));
|
||||
const { accessToken, refreshToken } = await login(email.trim(), password.trim(), pubKey?.trim());
|
||||
|
||||
cookies.set("refreshToken", refreshToken, {
|
||||
path: "/api/auth",
|
||||
httpOnly: true,
|
||||
secure: true,
|
||||
sameSite: "strict",
|
||||
});
|
||||
return json({ accessToken });
|
||||
};
|
||||
|
||||
@@ -1,18 +1,11 @@
|
||||
import { error, text } from "@sveltejs/kit";
|
||||
import { z } from "zod";
|
||||
import { logout } from "$lib/server/services/auth";
|
||||
import type { RequestHandler } from "./$types";
|
||||
|
||||
export const POST: RequestHandler = async ({ request }) => {
|
||||
const zodRes = z
|
||||
.object({
|
||||
refreshToken: z.string().nonempty(),
|
||||
})
|
||||
.safeParse(await request.json());
|
||||
if (!zodRes.success) error(400, zodRes.error.message);
|
||||
|
||||
const { refreshToken } = zodRes.data;
|
||||
await logout(refreshToken.trim());
|
||||
export const POST: RequestHandler = async ({ cookies }) => {
|
||||
const token = cookies.get("refreshToken");
|
||||
if (!token) error(401, "Token not found");
|
||||
|
||||
await logout(token.trim());
|
||||
return text("Logged out");
|
||||
};
|
||||
|
||||
@@ -1,16 +1,18 @@
|
||||
import { error, json } from "@sveltejs/kit";
|
||||
import { z } from "zod";
|
||||
import { refreshToken } from "$lib/server/services/auth";
|
||||
import type { RequestHandler } from "./$types";
|
||||
|
||||
export const POST: RequestHandler = async ({ request }) => {
|
||||
const zodRes = z
|
||||
.object({
|
||||
refreshToken: z.string().nonempty(),
|
||||
})
|
||||
.safeParse(await request.json());
|
||||
if (!zodRes.success) error(400, zodRes.error.message);
|
||||
export const POST: RequestHandler = async ({ cookies }) => {
|
||||
const token = cookies.get("refreshToken");
|
||||
if (!token) error(401, "Token not found");
|
||||
|
||||
const { refreshToken: token } = zodRes.data;
|
||||
return json(await refreshToken(token.trim()));
|
||||
const { accessToken, refreshToken: newToken } = await refreshToken(token.trim());
|
||||
|
||||
cookies.set("refreshToken", newToken, {
|
||||
path: "/api/auth",
|
||||
httpOnly: true,
|
||||
secure: true,
|
||||
sameSite: "strict",
|
||||
});
|
||||
return json({ accessToken });
|
||||
};
|
||||
|
||||
Reference in New Issue
Block a user