[Fix] Login Refresh Token to keep Users Logged In. Fixes Issue[1260] #1346
Conversation
|
|
theChosenDevop
changed the title
.husky/commit-msg
Outdated
There was a problem hiding this comment.
Why did you touch this??
.gitignore
Outdated
There was a problem hiding this comment.
Why is everyone touching this file and changing this??
There was a problem hiding this comment.
I was unable to push to the repository. The .husky pre-commit and commit-msg prevented git commit and was unable to effectively ignore .husky file
docker-compose.yml
Outdated
There was a problem hiding this comment.
Why did you push this??
| @@ -12,7 +12,7 @@ | |||
| "start:dev": "nest start --watch", | |||
| "start:debug": "nest start --debug --watch", | |||
| "start:prod": "node dist/src/main", | |||
There was a problem hiding this comment.
Why did you change this??
There was a problem hiding this comment.
"dev": "PROFILE=local was unable to run, so I had to use "npx ts-node-dev -r dotenv/config --respawn src/main",
| async login(@Body() loginDto: LoginDto): Promise<LoginResponseDto | { status_code: number; message: string }> { | ||
| return this.authService.loginUser(loginDto); | ||
| async login( | ||
| @Body() loginDto: LoginDto, |
There was a problem hiding this comment.
Remove these comments.
| @@ -173,4 +187,12 @@ export default class RegistrationController { | |||
| public async resetPassword(@Body() updatePasswordDto: UpdatePasswordDto) { | |||
| return this.authService.updateForgotPassword(updatePasswordDto); | |||
| } | |||
|
|
|||
There was a problem hiding this comment.
Logout is being handled on the FE
Removed the comments
Pull Request
Description
This PR implements secure user authentication using access tokens and refresh tokens. Users receive an access token (valid for 15 minutes) and a refresh token (valid for 7 days). The refresh token is used to generate new access tokens without requiring re-authentication. The access token is stored in an HTTP-only cookie with a
/path, while the refresh token is stored in an HTTP-only cookie with a/auth/refresh-tokenpath.Related Issue
Fixes #
Type of Change
How Has This Been Tested?
Test Evidence
Screenshots (if applicable)
Checklist
Additional Notes
This implementation follows best security practices by: