RefreshToken request header includes the (expired) access token in Authorization header

sidebase / nuxt-auth

Authentication built for Nuxt 3! Easily add authentication via OAuth providers, credentials or Email Magic URLs!

https://auth.sidebase.io

MIT License

1.32k stars 165 forks source link

RefreshToken request header includes the (expired) access token in Authorization header #931

Open Mkaddem97 opened 1 month ago

Mkaddem97 commented 1 month ago

Environment

Operating System: Windows_NT
Node Version: v22.6.0
Nuxt Version: 3.13.2
CLI Version: 3.14.0
Nitro Version: 2.9.7
Package Manager: pnpm@9.12.1
Builder: -
User Config: -
Runtime Modules: -
Build Modules: -

Reproduction

Describe the bug

While the access token is expired, why you include it in the refresh token request in the Authorization header I guess it should be sent as a request with "NO AUTH"

header

Additional context

No response

Logs