Removed renewing refresh token. Added validate endpoint for tokens. Refresh token is given only if 'remember me' option is enabled on login.
This commit is contained in:
@ -45,4 +45,12 @@ export class AuthAccessService {
|
||||
exp: expiration.getTime(),
|
||||
}
|
||||
}
|
||||
|
||||
async verify(token: string) {
|
||||
return await this.jwts.verifyAsync(token,
|
||||
{
|
||||
secret: this.config.getOrThrow<string>('AUTH_JWT_ACCESS_TOKEN_SECRET')
|
||||
}
|
||||
);
|
||||
}
|
||||
}
|
||||
|
Reference in New Issue
Block a user