injected service use to handle the refresh token related operations
injected configuration use to handle the configuration related operations
injected logger used to handle the logging
request context [headers, body, params, query]. Note:
body.findgerprint
defaulted to ''
200 Status OK
{
data: {
accessToken: string
},
status: 200
}
This handler will rotate token and generate a new access token by applying the following steps in sequence:
Get token verification from request info
Authenticate refresh token from context
Generate a new refresh token (refreshTokenService.generateRefreshToken)
Delete old refresh token (refreshTokenService.deleteRefreshToken)
Refresh access token (refreshTokenService.refreshAccessToken)
If authType is cookie, set cookie maxAge to 0
Return access token
400 NBError Bad Request
403 NBError Forbidden
Generated using TypeDoc
Refresh token handler