Add support for returning refresh token for mobile clients

This commit is contained in:
advplyr
2025-06-30 17:31:31 -05:00
parent 4d32a22de9
commit 8b995a179d
4 changed files with 35 additions and 14 deletions

View File

@ -336,6 +336,9 @@ class UserController {
const newAccessToken = await this.auth.invalidateJwtSessionsForUser(user, req, res)
if (newAccessToken) {
user.accessToken = newAccessToken
// Refresh tokens are only returned for mobile clients
// Mobile apps currently do not use this API endpoint so always set to null
user.refreshToken = null
Logger.info(`[UserController] Invalidated JWT sessions for user ${user.username} and rotated tokens for current session`)
} else {
Logger.info(`[UserController] Invalidated JWT sessions for user ${user.username}`)