Refresh Token 저장 방식 변경

This commit is contained in:
static
2024-12-26 18:54:31 +09:00
parent a42f26bab1
commit b6fbd83d6f
5 changed files with 76 additions and 23 deletions

View File

@@ -3,7 +3,7 @@ import { z } from "zod";
import { login } from "$lib/server/services/auth";
import type { RequestHandler } from "./$types";
export const POST: RequestHandler = async ({ request }) => {
export const POST: RequestHandler = async ({ request, cookies }) => {
const zodRes = z
.object({
email: z.string().email().nonempty(),
@@ -14,5 +14,13 @@ export const POST: RequestHandler = async ({ request }) => {
if (!zodRes.success) error(400, zodRes.error.message);
const { email, password, pubKey } = zodRes.data;
return json(await login(email.trim(), password.trim(), pubKey?.trim()));
const { accessToken, refreshToken } = await login(email.trim(), password.trim(), pubKey?.trim());
cookies.set("refreshToken", refreshToken, {
path: "/api/auth",
httpOnly: true,
secure: true,
sameSite: "strict",
});
return json({ accessToken });
};

View File

@@ -1,18 +1,11 @@
import { error, text } from "@sveltejs/kit";
import { z } from "zod";
import { logout } from "$lib/server/services/auth";
import type { RequestHandler } from "./$types";
export const POST: RequestHandler = async ({ request }) => {
const zodRes = z
.object({
refreshToken: z.string().nonempty(),
})
.safeParse(await request.json());
if (!zodRes.success) error(400, zodRes.error.message);
const { refreshToken } = zodRes.data;
await logout(refreshToken.trim());
export const POST: RequestHandler = async ({ cookies }) => {
const token = cookies.get("refreshToken");
if (!token) error(401, "Token not found");
await logout(token.trim());
return text("Logged out");
};

View File

@@ -1,16 +1,18 @@
import { error, json } from "@sveltejs/kit";
import { z } from "zod";
import { refreshToken } from "$lib/server/services/auth";
import type { RequestHandler } from "./$types";
export const POST: RequestHandler = async ({ request }) => {
const zodRes = z
.object({
refreshToken: z.string().nonempty(),
})
.safeParse(await request.json());
if (!zodRes.success) error(400, zodRes.error.message);
export const POST: RequestHandler = async ({ cookies }) => {
const token = cookies.get("refreshToken");
if (!token) error(401, "Token not found");
const { refreshToken: token } = zodRes.data;
return json(await refreshToken(token.trim()));
const { accessToken, refreshToken: newToken } = await refreshToken(token.trim());
cookies.set("refreshToken", newToken, {
path: "/api/auth",
httpOnly: true,
secure: true,
sameSite: "strict",
});
return json({ accessToken });
};