mirror of
https://github.com/kmc7468/arkvault.git
synced 2025-12-16 06:58:46 +00:00
Access Token 저장 방식 변경
This commit is contained in:
@@ -1,4 +1,4 @@
|
||||
import { error } from "@sveltejs/kit";
|
||||
import { error, type Cookies } from "@sveltejs/kit";
|
||||
import jwt from "jsonwebtoken";
|
||||
import env from "$lib/server/loadenv";
|
||||
|
||||
@@ -35,13 +35,13 @@ export const verifyToken = (token: string) => {
|
||||
}
|
||||
};
|
||||
|
||||
export const authenticate = (request: Request) => {
|
||||
const accessToken = request.headers.get("Authorization");
|
||||
if (!accessToken?.startsWith("Bearer ")) {
|
||||
error(401, "Access token required");
|
||||
export const authenticate = (cookies: Cookies) => {
|
||||
const accessToken = cookies.get("accessToken");
|
||||
if (!accessToken) {
|
||||
error(401, "Access token not found");
|
||||
}
|
||||
|
||||
const tokenPayload = verifyToken(accessToken.slice(7));
|
||||
const tokenPayload = verifyToken(accessToken);
|
||||
if (tokenPayload === TokenError.EXPIRED) {
|
||||
error(401, "Access token expired");
|
||||
} else if (tokenPayload === TokenError.INVALID || tokenPayload.type !== "access") {
|
||||
|
||||
@@ -71,7 +71,7 @@ export const logout = async (refreshToken: string) => {
|
||||
await revokeRefreshToken(jti);
|
||||
};
|
||||
|
||||
export const refreshToken = async (refreshToken: string) => {
|
||||
export const refreshTokens = async (refreshToken: string) => {
|
||||
const { jti: oldJti, userId, clientId } = await verifyRefreshToken(refreshToken);
|
||||
const newJti = uuidv4();
|
||||
|
||||
|
||||
Reference in New Issue
Block a user