add refresh token API endpoint

Selecro · Sep 19, 2023 · 5b7bd96 · 5b7bd96
1 parent a9ea985
commit 5b7bd96
Show file tree

Hide file tree

Showing 4 changed files with 105 additions and 6 deletions.
diff --git a/src/controllers/user.controller.ts b/src/controllers/user.controller.ts
@@ -2,6 +2,7 @@ import {authenticate} from '@loopback/authentication';
 import {
   Credentials,
   JWTService,
+  TokenObject,
   UserCredentials,
 } from '@loopback/authentication-jwt';
 import {inject} from '@loopback/context';
@@ -112,14 +113,75 @@ export class UserController {
     return token;
   }
 
+  @post('/refresh-token', {
+    responses: {
+      '200': {
+        description: 'Refresh token',
+        content: {
+          'application/json': {
+            schema: {
+              type: 'object',
+              properties: {
+                token: {type: 'string'},
+              },
+            },
+          },
+        },
+      },
+    },
+  })
+  async refreshToken(
+    @requestBody({
+      content: {
+        'application/json': {
+          schema: {
+            type: 'object',
+            properties: {
+              token: {type: 'string'},
+            },
+            required: [
+              'token',
+            ],
+          },
+        },
+      },
+    })
+    requestBody: {refreshToken: string},
+  ): Promise<TokenObject> {
+    try {
+      const {refreshToken} = requestBody;
+      if (!refreshToken) {
+        throw new HttpErrors.Unauthorized(
+          `Error verifying token: 'refresh token' is null`,
+        );
+      }
+      const userRefreshData = await this.jwtService.verifyToken(refreshToken);
+      const user = await this.userRepository.findById(
+        userRefreshData.userId.toString(),
+      );
+      const userProfile: UserProfile = this.userService.convertToUserProfile(user);
+      const token = await this.jwtService.generateToken(userProfile);
+      return {
+        accessToken: token,
+      };
+    } catch (error) {
+      throw new HttpErrors.Unauthorized(
+        `Error verifying token: ${error.message}`,
+      );
+    }
+  }
+
   @post('/signup', {
     responses: {
       '200': {
         description: 'Signup',
         content: {
           'application/json': {
             schema: {
-              type: 'boolean',
+              type: 'object',
+              properties: {
+                token: {type: 'string'},
+              },
             },
           },
         },

diff --git a/src/repositories/user.repository.ts b/src/repositories/user.repository.ts
@@ -1,11 +1,11 @@
-import {inject, Getter} from '@loopback/core';
+import {Getter, inject} from '@loopback/core';
 import {
   DefaultCrudRepository,
-  repository,
   HasManyRepositoryFactory,
+  repository,
 } from '@loopback/repository';
 import {DbDataSource} from '../datasources';
-import {User, UserRelations, Instruction, Progress} from '../models';
+import {Instruction, Progress, User, UserRelations} from '../models';
 import {InstructionRepository} from './instruction.repository';
 import {ProgressRepository} from './progress.repository';
 

diff --git a/src/services/jwt-service.ts b/src/services/jwt-service.ts
@@ -4,10 +4,17 @@
 // License text available at https://opensource.org/licenses/MIT
 
 import {TokenService} from '@loopback/authentication';
+import {TokenObject} from '@loopback/authentication-jwt';
 import {inject} from '@loopback/core';
+import {repository} from '@loopback/repository';
 import {HttpErrors} from '@loopback/rest';
 import {securityId, UserProfile} from '@loopback/security';
 import {promisify} from 'util';
+import {
+  UserRepository
+} from '../repositories';
+import {MyUserService} from './user-service';
+
 const jwt = require('jsonwebtoken');
 const signAsync = promisify(jwt.sign);
 const verifyAsync = promisify(jwt.verify);
@@ -18,7 +25,12 @@ export class JWTService implements TokenService {
     private jwtSecret: string,
     @inject('authentication.jwt.expiresIn')
     private jwtExpiresIn: string,
-  ) {}
+    @inject('services.user.service')
+    public userService: MyUserService,
+    @inject('services.jwt.service')
+    public jwtService: JWTService,
+    @repository(UserRepository) protected userRepository: UserRepository,
+  ) { }
 
   async verifyToken(token: string): Promise<UserProfile> {
     if (!token) {
@@ -69,4 +81,29 @@ export class JWTService implements TokenService {
     }
     return token;
   }
+
+  async refreshToken(refreshToken: string): Promise<TokenObject> {
+    try {
+      if (!refreshToken) {
+        throw new HttpErrors.Unauthorized(
+          `Error verifying token : 'refresh token' is null`,
+        );
+      }
+      const userRefreshData = await this.verifyToken(refreshToken);
+      const user = await this.userRepository.findById(
+        userRefreshData.userId.toString(),
+      );
+      const userProfile: UserProfile =
+        this.userService.convertToUserProfile(user);
+      // create a JSON Web Token based on the user profile
+      const token = await this.jwtService.generateToken(userProfile);
+      return {
+        accessToken: token,
+      };
+    } catch (error) {
+      throw new HttpErrors.Unauthorized(
+        `Error verifying token : ${error.message}`,
+      );
+    }
+  }
 }
diff --git a/src/services/user-service.ts b/src/services/user-service.ts
@@ -14,7 +14,7 @@ export class MyUserService implements UserService<User, Credentials> {
     public userRepository: UserRepository,
     @inject('services.hasher')
     public hasher: BcryptHasher,
-  ) {}
+  ) { }
 
   async verifyCredentials(credentials: Credentials): Promise<User> {
     const foundUser0 = await this.userRepository.findOne({