re-implemented JWT auth

app/server/express/auth/refreshToken.ts

@@ -0,0 +1,51 @@
+import { config } from '@app/server/main';
+import { prisma } from '@app/server/prisma/client';
+import { Session } from '@generated/types';
+import 'dotenv/config';
+import { Request, Response } from 'express';
+import jwt from 'jsonwebtoken';
+
+export async function refreshTokenController(req: Request, res: Response) {
+  try {
+    const cookie: { jwt?: string | null } = req.cookies;
+
+    if (cookie == null || cookie.jwt == null) {
+      res.sendStatus(401);
+      return;
+    }
+
+    const refreshToken = cookie.jwt;
+
+    const user = await prisma.user.findUnique({
+      where: { refreshToken },
+      select: { id: true }
+    });
+
+    if (user == null) {
+      res.statusMessage = 'User not found.';
+      res.status(401).end();
+      return;
+    }
+
+    const decoded = jwt.verify(refreshToken, config.refreshToken.secret) as {
+      userId: string;
+      iat: number;
+      exp: number;
+    };
+
+    if (user.id !== decoded.userId) {
+      res.statusMessage = 'Invalid token.';
+      res.status(401).end();
+      return;
+    }
+
+    const accessToken = jwt.sign({ userId: user.id }, config.accessToken.secret, {
+      expiresIn: config.accessToken.expiresIn
+    });
+
+    const session: Session = { accessToken };
+    res.json(session);
+  } catch (error) {
+    console.error(error);
+  }
+}