Forge — Command Palette

forge — auth-service/src/handlers/token.rs

Explorer

Source Control

Run & Debug

Extensions

Database

Terminal

// Validate the refresh token against the signing key set

pub async fn validate_refresh(token: &str) -> Result<Claims> {

let keys = fetch_jwks().await?;

let meta = decode_header(token)?;

let kid = meta.kid.ok_or(Error::MissingKid)?;

let key = keys.find(kid).ok_or(Error::KeyNotFound)?;

let claims = decode(token, &key).validate_exp()?;

// reject tokens older than the rotation window

if claims.iat < ROTATION_EPOCH {

return Err(Error::StaleToken);

}

Ok(claims)

}

// Exchange a refresh token for a new access token pair

pub async fn refresh_exchange(

State(db): State<PgPool>,

Json(body): Json<RefreshBody>,

) -> impl IntoResponse {

let claims = validate_refresh(&body.token).await?;

let user = db.fetch_user(claims.sub).await?;

let pair = mint_token_pair(&user).await?;

Outline

validate_refresh14

refresh_exchange38

mint_token_pair62

Problems

Warnings2

Timeline

8:42 AMsaved

⎇ main rust-analyzer UTF-8 Rust Ln 14, Col 24 Spaces: 4