33 lines
770 B
JavaScript
33 lines
770 B
JavaScript
const jwt = require('jsonwebtoken');
|
|
const { tokens } = require('../database/models');
|
|
|
|
const generate = require('./token-generate-refresh');
|
|
const destroy = require('./token-destroy');
|
|
|
|
module.exports = async (oldRefreshToken, callback) => {
|
|
if (!oldRefreshToken) {
|
|
return callback(401);
|
|
}
|
|
|
|
const tokenRecord = await tokens.findOne({
|
|
where: {
|
|
token: oldRefreshToken || ''
|
|
}
|
|
});
|
|
|
|
if (!tokenRecord) {
|
|
return callback(403);
|
|
}
|
|
|
|
jwt.verify(oldRefreshToken, process.env.SECRET_REFRESH, (err, user) => {
|
|
if (err) {
|
|
return callback(403);
|
|
}
|
|
|
|
const { accessToken, refreshToken } = generate(user.index, user.email, user.username, user.type, user.admin, user.mod);
|
|
|
|
destroy(oldRefreshToken);
|
|
|
|
return callback(null, accessToken, refreshToken);
|
|
});
|
|
}; |