imacat/lucia-frontend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add response structure validation in auth token refresh

Browse Source 
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
依瑪貓
2026-03-09 14:10:36 +08:00
parent b5dfae9835
commit 387993da92
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/api/auth.js
View File

@@ -34,8 +34,11 @@ export async function refreshTokenAndGetNew() {
}; };
const response = await axios.post(api, data, config); const response = await axios.post(api, data, config);
const newAccessToken = response.data.access_token; const newAccessToken = response.data?.access_token;
const newRefreshToken = response.data.refresh_token; const newRefreshToken = response.data?.refresh_token;
if (!newAccessToken || !newRefreshToken) {
throw new Error("Invalid token response structure");
}
setCookieWithoutExpiration("luciaToken", newAccessToken); setCookieWithoutExpiration("luciaToken", newAccessToken);
// Expire in ~6 months // Expire in ~6 months