Implement refresh and access token system in backend

Madhawa97 commented 3 weeks ago

Description: Develop a robust refresh and access token system in the backend to enhance application security.

Tasks:

Acceptance Criteria:

[ ] Modify the signAndSetCookie function to generate both access and refresh tokens
[ ] Update the login, register, and OAuth callback functions to use the new token system
[ ] Create a new endpoint for token refresh (/auth/refresh-token)
[ ] Update the requireAuth middleware to validate access tokens
[ ] Implement token revocation on logout
[ ] Update error handling to return appropriate responses for token-related errors
[ ] Implement rate limiting on token-related endpoints to prevent abuse
[ ] Update the passport JWT strategy to work with the new token system
[ ] Ensure all routes that require authentication use the new token system

Additional Information:

Consider using JSON Web Tokens (JWT) for implementing the token system.
Ensure that refresh tokens have a longer expiry time compared to access tokens.
Implement proper encryption for storing refresh tokens if needed.
Update the auth.service.ts file to include functions for handling the new token system.
Modify the auth-routes.schema.ts to include validation for the new token endpoints.

Related Dependencies or References:

mayura-andrew commented 3 weeks ago

Hey @dileepainivossl, would you be interested in working on this issue?

dsmabulage commented 3 weeks ago

Hey @dileepainivossl, would you be interested in working on this issue?

Sure, can you assign it to me? for this Github user

mayura-andrew commented 3 weeks ago

Nice @dsmabulage 🚀, Thank you :)

anjula-sack commented 1 week ago

Any updates on this @dsmabulage

dsmabulage commented 1 week ago

Any updates on this @dsmabulage

added a pr #162

sef-global / scholarx-backend