[Fix] Login Refresh Token to keep Users Logged In. Fixes Issue[1260] #1346
Conversation
|
|
theChosenDevop
changed the title
There was a problem hiding this comment.
Why did you touch this??
There was a problem hiding this comment.
Why is everyone touching this file and changing this??
There was a problem hiding this comment.
I was unable to push to the repository. The .husky pre-commit and commit-msg prevented git commit and was unable to effectively ignore .husky file
There was a problem hiding this comment.
Why did you push this??
| "start": "nest start", | ||
| "start:dev": "nest start --watch", | ||
| "start:debug": "nest start --debug --watch", | ||
| "start:prod": "node dist/src/main", |
There was a problem hiding this comment.
Why did you change this??
There was a problem hiding this comment.
"dev": "PROFILE=local was unable to run, so I had to use "npx ts-node-dev -r dotenv/config --respawn src/main",
| async login(@Body() loginDto: LoginDto): Promise<LoginResponseDto | { status_code: number; message: string }> { | ||
| return this.authService.loginUser(loginDto); | ||
| async login( | ||
| @Body() loginDto: LoginDto, |
There was a problem hiding this comment.
Remove these comments.
| public async resetPassword(@Body() updatePasswordDto: UpdatePasswordDto) { | ||
| return this.authService.updateForgotPassword(updatePasswordDto); | ||
| } | ||
|
|
There was a problem hiding this comment.
Logout is being handled on the FE
Removed the comments
2 participants
Pull Request
Description
This PR implements secure user authentication using access tokens and refresh tokens. Users receive an access token (valid for 15 minutes) and a refresh token (valid for 7 days). The refresh token is used to generate new access tokens without requiring re-authentication. The access token is stored in an HTTP-only cookie with a
/path, while the refresh token is stored in an HTTP-only cookie with a/auth/refresh-tokenpath.Related Issue
Fixes #
Type of Change
How Has This Been Tested?
Test Evidence
Screenshots (if applicable)
Checklist
Additional Notes
This implementation follows best security practices by: