@vario-software/vario-app-framework-backend 2026.3.1 → 2026.3.2

package/api/ErpApi.js

@@ -8,7 +8,7 @@ const Migration = require('#backend/api/modules/migration.js');
 const TextEnum = require('#backend/api/modules/textEnum.js');
 const Webhook = require('#backend/api/modules/webhook.js');
 const PermittedToken = require('#backend/api/modules/permittedToken.js');
-const { validateOfflineToken } = require('#backend/utils/token.js');
+const { validateOfflineToken, isAppTokenExpired, refreshAppToken } = require('#backend/utils/token.js');
 
 const singletonPromise = new PromiseSingletonMap();
 class ErpApi extends Api
@@ -35,6 +35,11 @@ class ErpApi extends Api
 
     if (!this.executeAsAppUser)
     {
+      if (isAppTokenExpired())
+      {
+        await refreshAppToken();
+      }
+
       this.setHeaders({
         'X-Forwarded-App-Token': getAppToken(),
       });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vario-software/vario-app-framework-backend",
-  "version": "2026.03.1",
+  "version": "2026.03.2",
   "repository": "https://github.com/vario-software/vario-app-framework",
   "author": "VARIO Software AG",
   "homepage": "https://www.vario.ag",

package/utils/token.js

@@ -1,5 +1,6 @@
 const { jwtVerify, decodeJwt, importJWK } = require('jose');
 const { getApp } = require('#backend/utils/context.js');
+const { getAppToken, getContext } = require('#backend/utils/context.js');
 
 function validateOfflineToken(offlineToken)
 {
@@ -82,7 +83,45 @@ function validateAppToken(appToken)
   });
 }
 
+function isAppTokenExpired()
+{
+  const { accessToken } = getContext();
+
+  const { exp } = accessToken;
+
+  return ((exp - 2) < (Date.now() / 1000));
+}
+
+async function refreshAppToken()
+{
+  const appToken = getAppToken();
+  const app = getApp();
+
+  const { data } = await app.erp.fetch(`/cmn/apps/${app.client.appIdentifier}/refresh-token`, {
+    method: 'POST',
+    body: appToken,
+    useInternalApi: true,
+    headers: {
+      'Content-Type': 'text/plain',
+    },
+    secret: true,
+    executeAsAppUser: true,
+    secretsToMask: ['bearerToken'],
+  });
+
+  const newAppToken = data.bearerToken;
+
+  const accessToken = await validateAppToken(newAppToken);
+
+  const context = getContext();
+
+  context.appToken = newAppToken;
+  context.accessToken = accessToken;
+}
+
 module.exports = {
   validateOfflineToken,
   validateAppToken,
+  isAppTokenExpired,
+  refreshAppToken,
 };