Refreshing JWT (/jwt-refresh) does not give the user up to date (email, username ...)

[antbou]

Order of the steps to do :

Update the user [PUT] :

• Query http://localhost:4000/users/1
• JSON : {"id":1,"email":"mail@mail.tld","username":"test2"}
• Headers : Authorization Bearer token

Generate and get a New token : [POST]

• Query http://localhost:4000/jwt-refresh
• JSON : {"refresh_token":"1_227_EMeqEytKmCcGX_RQWfeQb0V9IY_w43viaXCcTNZOeKg"}
• Headers : Authorization Bearer token

Problem

the user object contained in the PAYLOAD access_token is not up to date

[Thynkon]

In fact, I was able to reproduce this issue.

This happens beceause the funcion set_jwt_token defined in /app/misc/rodauth_main.rb is not called.