@ahhaohho/auth-middleware 2.3.5 → 2.3.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ahhaohho/auth-middleware",
-  "version": "2.3.5",
+  "version": "2.3.7",
   "description": "Shared authentication and authorization middleware for ahhaohho microservices",
   "main": "src/index.js",
   "scripts": {

package/src/middleware/auth.js

@@ -177,7 +177,8 @@ async function authenticateHybrid(req, res, next) {
           phoneNumber: refreshUser.phoneNumber
         };
 
-        const newAccessToken = await signToken(tokenData, { expiresIn: '1h' });
+        const accessExpiration = process.env.JWT_ACCESS_EXPIRATION || '24h';
+        const newAccessToken = await signToken(tokenData, { expiresIn: accessExpiration });
 
         console.log('[@ahhaohho/auth-middleware] ✅ New access token generated for userId:', refreshUser.userId);
 

package/src/strategies/refresh.strategy.js

@@ -70,7 +70,21 @@ function createRefreshStrategy() {
 
       return done(null, user);
     } catch (error) {
-      console.error('[@ahhaohho/auth-middleware] ❌ Refresh token verification failed:', error.message);
+      // 검증 실패 시 토큰을 디코딩(검증 없이)하여 발급 시점 확인
+      let debugInfo = '';
+      try {
+        const jwt = require('jsonwebtoken');
+        const token = extractRefreshToken(req);
+        if (token) {
+          const payload = jwt.decode(token);
+          if (payload) {
+            const iat = payload.iat ? new Date(payload.iat * 1000).toISOString() : 'unknown';
+            const exp = payload.exp ? new Date(payload.exp * 1000).toISOString() : 'unknown';
+            debugInfo = ` | userId=${payload.userId} iat=${iat} exp=${exp}`;
+          }
+        }
+      } catch { /* ignore decode errors */ }
+      console.error(`[@ahhaohho/auth-middleware] ❌ Refresh token verification failed: ${error.message}${debugInfo}`);
       return done(error, false);
     }
   });