Elijah/drive
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: allow refresh tokens in AuthMiddleware for refresh route and dispatch auth_error on 401s to force login redirect
All checks were successful
Automated Container Build / build-and-push (push) Successful in 1m23s
Details

Browse source
This commit is contained in:
Elijah 2026-05-23 16:45:17 -07:00
parent 4c8e6b814c
commit fbad71cbf2
3 changed files with 19 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

10
backend/middleware/auth.go
View file

@ -59,8 +59,14 @@ func AuthMiddleware(jwtSecret string) fiber.Handler {
return c.Status(fiber.StatusUnauthorized).JSON(fiber.Map{"error": "invalid token type for query parameter"})
}
} else {
if tokenType != "access" {
return c.Status(fiber.StatusUnauthorized).JSON(fiber.Map{"error": "invalid token type for authorization header"})
if c.Path() == "/api/auth/refresh" {
if tokenType != "refresh" {
return c.Status(fiber.StatusUnauthorized).JSON(fiber.Map{"error": "invalid token type for refresh endpoint"})
}
} else {
if tokenType != "access" {
return c.Status(fiber.StatusUnauthorized).JSON(fiber.Map{"error": "invalid token type for authorization header"})
}
}
}