Update refresh endpoint to support override cookie token
Some checks failed
Integration Test / build and test (push) Has been cancelled
Run Unit Tests / Run Unit Tests (push) Has been cancelled

This commit is contained in:
advplyr 2025-07-01 16:31:26 -05:00
parent 8b995a179d
commit 44ff90a6f2

View file

@ -484,8 +484,9 @@ class Auth {
let refreshToken = req.cookies.refresh_token let refreshToken = req.cookies.refresh_token
// For mobile clients, the refresh token is sent in the authorization header // For mobile clients, the refresh token is sent in the authorization header
// Force return refresh token if x-return-tokens header is true
let shouldReturnRefreshToken = false let shouldReturnRefreshToken = false
if (!refreshToken && req.headers.authorization?.startsWith('Bearer ')) { if (req.headers.authorization?.startsWith('Bearer ') && (!refreshToken || req.headers['x-return-tokens'] === 'true')) {
refreshToken = req.headers.authorization.split(' ')[1] refreshToken = req.headers.authorization.split(' ')[1]
shouldReturnRefreshToken = true shouldReturnRefreshToken = true
} }