refresh token

src/modules/auth/auth.controller.ts

@@ -4,6 +4,8 @@ import { RequestOtpDto } from './dto/request-otp.dto';
 import { ApiTags, ApiOperation, ApiBody, ApiResponse } from '@nestjs/swagger';
 import { VerifyOtpDto } from './dto/verify-otp.dto copy';
 import { Throttle } from '@nestjs/throttler';
+import { RefreshTokenRateLimit } from 'src/common/decorators/rate-limit.decorator';
+import { RefreshTokenDto } from './dto/refresh-token.dto';
 
 @ApiTags('auth')
 @Controller('auth')
@@ -46,4 +48,11 @@ export class AuthController {
   adminOtpVerify(@Body() dto: VerifyOtpDto) {
     return this.authService.verifyOtpAdmin(dto.phone, dto.otp); // assuming dto has `otp` property
   }
+
+  @RefreshTokenRateLimit()
+  @ApiOperation({ summary: 'refresh the user access token / refresh token' })
+  @Post('refresh')
+  refreshToken(@Body() refreshTokenDto: RefreshTokenDto) {
+    return this.authService.refreshToken(refreshTokenDto.refreshToken);
+  }
 }

src/modules/auth/auth.module.ts

@@ -6,6 +6,7 @@ import { UserModule } from '../users/user.module';
 import { JwtModule } from '@nestjs/jwt';
 import { ConfigService } from '@nestjs/config';
 import { AdminModule } from '../admin/admin.module';
+import { TokensService } from './services/tokens.service';
 
 @Module({
   imports: [
@@ -24,6 +25,6 @@ import { AdminModule } from '../admin/admin.module';
     AdminModule,
   ],
   controllers: [AuthController],
-  providers: [AuthService],
+  providers: [AuthService, TokensService],
 })
 export class AuthModule {}

src/modules/auth/dto/refresh-token.dto.ts

@@ -0,0 +1,9 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { IsNotEmpty, IsString } from 'class-validator';
+
+export class RefreshTokenDto {
+  @ApiProperty({ description: 'Refresh token' })
+  @IsString({ message: 'Refresh token must be a string' })
+  @IsNotEmpty({ message: 'Refresh token is required' })
+  refreshToken: string;
+}

src/modules/auth/services/auth.service.ts

@@ -7,6 +7,7 @@ import { randomInt } from 'crypto';
 import { JwtService } from '@nestjs/jwt';
 import { AdminService } from '../../admin/admin.service';
 import { AuthEntityType } from 'src/modules/auth/guards/auth.guard';
+import { TokensService } from './tokens.service';
 
 @Injectable()
 export class AuthService {
@@ -16,6 +17,7 @@ export class AuthService {
     private readonly userService: UserService,
     private readonly jwtService: JwtService,
     private readonly adminService: AdminService,
+    private readonly tokensService: TokensService,
   ) {}
 
   async requestOtp(dto: RequestOtpDto) {
@@ -55,9 +57,10 @@ export class AuthService {
 
     const user = await this.userService.findOrCreateByPhone(phone);
 
-    const accessToken = await this.issueToken(user.id, AuthEntityType.USER);
+    // const accessToken = await this.issueToken(user.id, AuthEntityType.USER);
+    const tokens = await this.tokensService.generateTokens(user);
 
-    return { success: true, message: 'User registered successfully!', accessToken };
+    return { success: true, message: 'User registered successfully!', tokens };
   }
 
   async verifyOtpAdmin(phone: string, code: string) {
@@ -88,4 +91,8 @@ export class AuthService {
     };
     return this.jwtService.signAsync(payload);
   }
+
+  refreshToken(oldRefreshToken: string) {
+    return this.tokensService.refreshToken(oldRefreshToken);
+  }
 }