Token properties only update on page reload #13345

import { AuthOptions } from "next-auth";
import CredentialsProvider from "next-auth/providers/credentials";
import { serverApiPost } from "@/lib/api/helpers/server-api-methods";
import { PostAuthenticationRequestDto } from "@/lib/api/dtos/authentication/requests/post-authentication-request-dto";
import { PostAuthenticationResponseDto } from "@/lib/api/dtos/authentication/responses/post-authentication-response-dto";
import { PostRefreshTokenRequestDto } from "@/lib/api/dtos/authentication/requests/post-refresh-token-request-dto";
import { PostRefreshTokenResponseDto } from "@/lib/api/dtos/authentication/responses/post-refresh-token-response-dto";

const refreshToken = async (refreshToken: string) => {
  console.log(`Refreshing token with refresh token: ${refreshToken}`);

  const body: PostRefreshTokenRequestDto = {
    refreshToken: refreshToken,
  };
  const response = await serverApiPost<
    PostRefreshTokenResponseDto,
    PostRefreshTokenRequestDto
  >("/auth/refresh", body, { auth: false, service: "authentication" });

  console.log(`Recieved refresh token ${response.refreshToken}`)
  return response
}


export const authOptions: AuthOptions = {
  providers: [
    CredentialsProvider({
      name: "Credentials",
      credentials: {
        username: { label: "Username", type: "text" },
        password: { label: "Password", type: "password" },
      },
      async authorize(credentials) {
        if (!credentials?.username || !credentials?.password) return null;

        const response = await serverApiPost<
          PostAuthenticationResponseDto,
          PostAuthenticationRequestDto
        >(
          "/auth/login",
          { username: credentials.username, password: credentials.password },
          { auth: false, service: "authentication" }
        );

        console.log(`Authenticated and received refresh token: ${response.refreshToken}`);

        return {
          id: response.userId.toString(),
          accessToken: response.accessToken,
          refreshToken: response.refreshToken,
          expiresAt: response.expiresAt,
        };
      },
    }),
  ],

  session: { strategy: "jwt", maxAge: 60 * 300 },
  callbacks: {
    async jwt({ token, user, account }) {

      if (account && user) {
        token.accessToken = user.accessToken
        token.refreshToken = user.refreshToken
        token.expiresAt = user.expiresAt
      }

      const REFRESH_BUFFER_MS = 5_000;
      if (!token.expiresAt || Date.now() >= token.expiresAt - REFRESH_BUFFER_MS) {
        console.log(`TOKEN ABOUT TO EXPIRE: ${token.expiresAt}`)
        const response = await refreshToken(token.refreshToken || '')
        token.accessToken = response.accessToken
        token.refreshToken = response.refreshToken
        token.expiresAt = response.expiresAt
      }

      return token
    },

    async session({ session, token }) {
      session.accessToken = token.accessToken;
      session.refreshToken = token.refreshToken;
      session.expiresAt = token.expiresAt

      return session;
    },
  },
};

import NextAuth from "next-auth";
import "next-auth/jwt";

declare module "next-auth" {
  interface Session {
    accessToken?: string;
    refreshToken?: string;
    expiresAt?: number;
  }

  interface User {
    accessToken?: string;
    refreshToken?: string;
    expiresAt?: number;
  }

}

declare module "next-auth/jwt" {
  interface JWT {
    accessToken?: string;
    refreshToken?: string;
    expiresAt?: number;
  }
}