JWT Token Refresh Invoking

user_11100667 0
Viewed 234

I understand how to use JWT tokens for authentication/authorization. However, there is not a specific method call or event that invokes the code to provide a new token at the path "/token" using the refresh token. Please answer, does the code below get called automatically behind-the-scenes by NPM package 'jsonwebtoken' when the token expires, or is there a manual way to call this that I am missing in the tutorials?

let refreshTokens = []; //in production use redis or other...

app.post('/token', (req, res) => {
    const refreshToken = req.body.token;
    if (refreshToken == null) return res.sendStatus(401);
    if (refreshTokens.includes(refreshToken)) return res.sendStatus(403);
    jwt.verify(refreshToken, process.env.REFRESH_TOKEN_SECRET, (err, user) => {
        if (err) return res.sendStatus(403);
        const accessToken = generateAccessToken({ name: user.name });
        res.json({ accessToken: accessToken });
    })
})
jwt express node.js authentication javascript
2 Answers
user_79574090

To clarify, this is more of a communication error. Usually JWT token ecosystems are taught as a server-side process without mentioning that the refresh endpoint is called by the client side from an event like a login form, just like any other server side endpoint. Here is a good example of a complete tutorial of the JWT process. It is simple with that being said.

https://github.com/manosriram-youtube/jwt-auth

user_111006670
Related