lnn0q/ln
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

re-implemented JWT auth

Browse source
This commit is contained in:
lnn0q 2025-04-18 14:47:42 +03:00
parent c190d368de
commit b47b0f3752
18 changed files with 390 additions and 174 deletions
Download patch file Download diff file Expand all files Collapse all files

23
app/server/graphql/resolvers/auth/login.ts
View file

@ -3,6 +3,7 @@ import { prisma } from '@app/server/prisma/client';
import { MutationLoginArgs, Session } from '@generated/types';
import bcrypt from 'bcrypt';
import jwt from 'jsonwebtoken';
import { config } from '@app/server/main';
export async function LoginResolver(
_: any,
@ -19,16 +20,11 @@ export async function LoginResolver(
const match = await bcrypt.compare(input.password, user.password);
if (!match) throw new Error(error);
const accessTokenSecret = process.env.ACCESS_TOKEN_SECRET;
const refreshTokenSecret = process.env.REFRESH_TOKEN_SECRET;
if (accessTokenSecret == null || refreshTokenSecret == null) throw new Error('No secrets found');
const accessToken = jwt.sign({ userId: user.id }, accessTokenSecret, {
expiresIn: '30s'
const accessToken = jwt.sign({ userId: user.id }, config.accessToken.secret, {
expiresIn: config.accessToken.expiresIn
});
const refreshToken = jwt.sign({ userId: user.id }, refreshTokenSecret, {
expiresIn: '1d'
const refreshToken = jwt.sign({ userId: user.id }, config.refreshToken.secret, {
expiresIn: config.refreshToken.expiresIn
});
await prisma.user.update({
@ -40,17 +36,10 @@ export async function LoginResolver(
httpOnly: true,
sameSite: 'none',
secure: true,
maxAge: 24 * 60 * 60 * 1000
maxAge: config.refreshToken.maxAge
});
return {
accessToken
// refreshToken: {
// token: refreshToken,
// httpOnly: true,
// secure: true,
// maxAge: 24 * 60 * 60 * 1000,
// sameSite: 'None'
// }
};
}