@ductape/sdk 0.1.128 → 0.1.129

package/dist/processor/services/processor.service.js

@@ -843,6 +843,7 @@ class ProcessorService {
         }
     }
     async generateSession(payload) {
+        var _a, _b, _c;
         try {
             const { product: product_tag, env: slug, tag, data } = payload;
             const input = (await this.inputService.parseJson({
@@ -872,7 +873,13 @@ class ProcessorService {
                 const token = JWT.sign({ session: payload.tag, env: payload.env, session_id, data }, privateKey, {
                     expiresIn: expiry,
                 });
-                const refreshToken = (0, processor_utils_1.encrypt)(JSON.stringify(data), privateKey);
+                const refreshEndAt = (0, processor_utils_1.calculateExpiry)((_a = session.refresh_expiry) !== null && _a !== void 0 ? _a : session.expiry, (_b = session.refresh_period) !== null && _b !== void 0 ? _b : session.period);
+                const refreshToken = (0, processor_utils_1.encrypt)(JSON.stringify({
+                    __ductape_refresh: 1,
+                    data,
+                    expires_at: refreshEndAt,
+                    rotation: (_c = session.refresh_rotation) !== null && _c !== void 0 ? _c : 'rotate_on_use',
+                }), privateKey);
                 // WRITE REFRESH TOKEN TO DATABASE... TO INVALIDATE DELETE FROM DATABASE
                 const details = {
                     identifier: user,
@@ -903,7 +910,12 @@ class ProcessorService {
         const { refreshToken } = payload, payloadData = __rest(payload, ["refreshToken"]);
         const valid = await this.processorApiService.validateRefreshToken({ refreshToken, product: payload.product, env: payload.env }, this.getUserAccess());
         if (valid) {
-            const data = JSON.parse((0, processor_utils_1.decrypt)(refreshToken, privateKey));
+            const decrypted = JSON.parse((0, processor_utils_1.decrypt)(refreshToken, privateKey));
+            const isEnvelope = decrypted && decrypted.__ductape_refresh === 1;
+            if (isEnvelope && (!Number.isFinite(decrypted.expires_at) || decrypted.expires_at <= Date.now())) {
+                throw new Error('Refresh token has expired');
+            }
+            const data = isEnvelope ? decrypted.data : decrypted;
             return await this.generateSession(Object.assign(Object.assign({}, payloadData), { data }));
         }
         else {