Merge pull request #51 from call-0f-code/refresh-token

Refresh token

Author: i-am-that-guy

backend/.env.example

@@ -1,4 +1,5 @@
 JWT_SECRET=
+REFRESH_SECRET=
 SALTING=
 API_URL='http://localhost:4000/api/v1'
 GOOGLE_CLIENT_ID=
@@ -10,4 +11,7 @@ GITHUB_CALLBACK_URL=
 RATE_LIMIT_WINDOW_MINUTES=
 RATE_LIMIT_MAX_REQUESTS=
 EMAIL_ID=
-RESEND_API_KEY=
+RESEND_API_KEY=
+NODE_ENV=
+REFRESH_TTL=                         #number of days for refresh token
+ACCESS_TTL=                          #access token time in minitues ie.15

backend/bun.lock

@@ -41,6 +41,7 @@
   "dependencies": {
     "@types/axios": "^0.14.4",
     "@types/bcrypt": "^6.0.0",
+    "@types/cookie-parser": "^1.4.10",
     "@types/form-data": "^2.5.2",
     "@types/jsonwebtoken": "^9.0.10",
     "@types/multer": "^2.0.0",
@@ -49,6 +50,7 @@
     "bcrypt": "^6.0.0",
     "better-auth": "^1.3.2",
     "body-parser": "^2.2.0",
+    "cookie-parser": "^1.4.7",
     "cors": "^2.8.5",
     "dotenv": "^17.2.0",
     "express": "^5.1.0",

backend/package.json

@@ -7,6 +7,8 @@ import routes from './routes';
 import { errorHandler } from './utils/apiError';
 import rateLimit from 'express-rate-limit';
 import helmet from 'helmet';
+import cookieParser from 'cookie-parser'
+
 
 const app = express();
 
@@ -27,6 +29,7 @@ app.use(
 
 app.use(helmet());
 app.use(limiter)
+app.use(cookieParser());
 app.use(json());
 app.use(urlencoded({ extended: true }));
 

backend/src/app.ts

@@ -21,7 +21,19 @@ export default{
         }
         return parseInt(process.env.RATE_LIMIT_MAX_REQUESTS)
     },
-
+     REFRESH_TTL: ()=>{
+        if(!process.env.REFRESH_TTL){
+            return 7;
+        }
+        return parseInt(process.env.REFRESH_TTL)
+    },
+    ACCESS_TTL: ()=>{
+        if(!process.env.ACCESS_TTL){
+            return 15;
+        }
+        return parseInt(process.env.ACCESS_TTL)
+    },
+    REFRESH_SECRET: validateEnvVar('REFRESH_SECRET', process.env.REFRESH_SECRET),
     JWT_SECRET: validateEnvVar('JWT_SECRET', process.env.JWT_SECRET),
     SALTING: validateEnvVar('SALTING', process.env.SALTING),
     API_URL: validateEnvVar('API_URL', process.env.API_URL),