for token refreshment in next js, next auth, cognito

Doyin Atobaru answered on November 1, 2024 Popularity 1/10 Helpfulness 1/10

answer for token refreshment in next js, next auth, cognito

related SSL Certificate Expiry Checker

for token refreshment in next js, next auth, cognito

Comment

export const isTokenExpired = (token: string): boolean => {
    const decoded = jwtDecode<DecodedToken>(token)
    return decoded.exp * 1000 < Date.now() // Convert exp to milliseconds
}

// Helper function to get token expiration time from token
export function getTokenExpirationTime(token: string): number {
    const payload = JSON.parse(atob(token.split('.')[1]))
    return payload.exp * 1000
}

export const validateAccessToken = async () => {
    const session = (await getSession()) as CustomSession | null
    if (!session) return

    const accessToken = session.accessToken
    const timeLeft = accessToken ? getTokenExpirationTime(accessToken) - Date.now() : 0

    // Schedule token refresh a few minutes before expiration
    const refreshTimeout = setTimeout(async () => {
        try {
            await getValidAccessToken(session)
        } catch (error) {
            console.error(error)
        }
    }, Math.max(timeLeft - 5 * 60 * 1000, 0)) // Refresh 5 minutes before expiration

    // Clear timeout if component unmounts
    return () => clearTimeout(refreshTimeout)
}


//auth.ts
//jwt callback
 async jwt({ token, profile, user }) {
            const userWithTokens = user as CustomUser
            if (user) {
                token.accessToken = userWithTokens.accessToken //store accesstoken in the token aswell
                token.refreshToken = userWithTokens.refreshToken
                token.accessTokenExpires = userWithTokens.accessTokenExpires;
            }
            if (profile) {
                token.sub = profile.sub ?? ''
                token.name = profile['cognito:username'] as string 
            }

            // If the token is still valid, return it
            if (Date.now() < (token.accessTokenExpires as number)) {
                return token
            }

            // Token has expired, try to refresh it
            const refreshedToken = await refreshAccessToken(
                token?.refreshToken as string,      
                token?.name as string       
            )

            if (refreshedToken) {
                return {
                    ...token,
                    accessToken: refreshedToken.accessToken,
                    accessTokenExpires: refreshedToken.accessTokenExpires,
                }
            }

            return {
                ...token,
                error: 'RefreshAccessTokenError',
            }
        },

export const refreshAccessToken = async (refreshToken: string, username: string) => {
    const secretHash = await getSecretHash(username)

    try {
        const command = new InitiateAuthCommand({
            AuthFlow: 'REFRESH_TOKEN_AUTH',
            ClientId: clientId,
            AuthParameters: {
                REFRESH_TOKEN: refreshToken,
                SECRET_HASH: secretHash,
            },
        })
        const response = await cognitoClient.send(command)

        const newAccessToken = response.AuthenticationResult?.AccessToken
        const expiresIn = response.AuthenticationResult?.ExpiresIn || 3600

        return {
            accessToken: newAccessToken,
            accessTokenExpires: Date.now() + expiresIn * 1000, // Calculate expiration time
        }
    } catch (error) {
        console.error('Error refreshing access token:', error)
        return null // Return null if there’s an error
    }
}

Popularity 1/10 Helpfulness 1/10 Language javascript

Source: Grepper

Tags: cognito javascript next token

Link to this answer
Share Copy Link

Contributed on Nov 01 2024

Doyin Atobaru

0 Answers Avg Quality 2/10

Closely Related Answers

SSL Certificate Expiry Checker

Comment

#!/bin/bash
# Check SSL certificate expiration 
DOMAIN="example.com"
EXPIRY_DATE=$(echo | openssl s_client -servername $DOMAIN -connect $DOMAIN:443 2>/dev/null | openssl x509 -noout -dates | grep notAfter | cut -d= -f2)
DAYS_LEFT=$(( ($(date -d "$EXPIRY_DATE" +%s) - $(date +%s)) / 86400 ))
echo "SSL certificate for $DOMAIN expires in $DAYS_LEFT days."

Popularity 1/10 Helpfulness 1/10 Language shell

Source: blog.devops.dev

Tags: shell ssl-certificate

Link to this answer
Share Copy Link

Contributed on Nov 01 2024

barisx

0 Answers Avg Quality 2/10

for token refreshment in next js, next auth, cognito

Contents

More Related Answers

for token refreshment in next js, next auth, cognito

Closely Related Answers

SSL Certificate Expiry Checker

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.