kuzzle 2.51.0 → 2.52.0

package/dist/lib/api/controllers/authController.js

@@ -498,10 +498,17 @@ class AuthController extends baseController_1.NativeController {
     async refreshToken(request) {
         this.assertIsAuthenticated(request);
         const strategy = request.input.args?.strategy;
-        if (request.input.args?.strategy) {
+        let expiresIn = request.input.args?.expiresIn;
+        if (strategy && strategy !== "local") {
+            /**
+             * Local strategy is a specific one that is meant to end the core of kuzzle
+             * For now we avoid entering here if someone mistakenly specify the "local" strategy
+             * // TODO remove this && strategy !== "local" condition once we properly removed the auth local plugin
+             */
             try {
                 const refreshTokenMethod = globalThis.kuzzle.pluginsManager.getStrategyMethod(strategy, "refreshToken");
-                await refreshTokenMethod(request);
+                const result = await refreshTokenMethod(request);
+                expiresIn = result?.expiresIn || expiresIn;
             }
             catch (err) {
                 /**
@@ -516,7 +523,7 @@ class AuthController extends baseController_1.NativeController {
                 throw securityError.get("refresh_forbidden", request.context.token.jwt);
             }
         }
-        const token = await this.ask("core:security:token:refresh", request.context.user, request.context.token, request.input.args.expiresIn);
+        const token = await this.ask("core:security:token:refresh", request.context.user, request.context.token, expiresIn);
         return this._sendToken(token, request);
     }
     assertIsAuthenticated(request) {

package/dist/package.json

@@ -1,7 +1,7 @@
 {
     "name": "kuzzle",
     "author": "The Kuzzle Team <support@kuzzle.io>",
-    "version": "2.51.0",
+    "version": "2.52.0",
     "description": "Kuzzle is an open-source solution that handles all the data management through a secured API, with a large choice of protocols.",
     "scripts": {
         "build": "rm -Rf ./dist && tsc && node ./bin/copy-protobuf.js",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "kuzzle",
   "author": "The Kuzzle Team <support@kuzzle.io>",
-  "version": "2.51.0",
+  "version": "2.52.0",
   "description": "Kuzzle is an open-source solution that handles all the data management through a secured API, with a large choice of protocols.",
   "scripts": {
     "build": "rm -Rf ./dist && tsc && node ./bin/copy-protobuf.js",