Force refresh OBO token every 15 min from browser

navikt · Sep 12, 2024 · 26a2842 · 26a2842
1 parent ea466fe
commit 26a2842
Show file tree

Hide file tree

Showing 3 changed files with 17 additions and 10 deletions.
diff --git a/frontend/src/components/smart-editor/tabbed-editors/editor.tsx b/frontend/src/components/smart-editor/tabbed-editors/editor.tsx
@@ -163,13 +163,16 @@ const EditorWithNewCommentAndFloatingToolbar = ({ id }: { id: string }) => {
   useEffect(() => {
     console.log('isConnected', isConnected);
 
-    const interval = setInterval(() => {
-      try {
-        fetch('/refresh-obo-access-token/kabal-api');
-      } catch (e) {
-        console.warn('Failed to refresh OBO token.', e);
-      }
-    }, 10_000);
+    const interval = setInterval(
+      () => {
+        try {
+          fetch('/refresh-obo-access-token/kabal-api');
+        } catch (e) {
+          console.warn('Failed to refresh OBO token.', e);
+        }
+      },
+      15 * 60 * 1_000,
+    );
 
     return () => clearInterval(interval);
   }, [isConnected]);

diff --git a/server/src/auth/on-behalf-of.ts b/server/src/auth/on-behalf-of.ts
@@ -42,7 +42,7 @@ export const getOnBehalfOfAccessToken = async (
   return token;
 };
 
-const refreshOnBehalfOfAccessToken = async (
+export const refreshOnBehalfOfAccessToken = async (
   authClient: Client,
   accessToken: string,
   cacheKey: string,

diff --git a/server/src/plugins/obo-token.ts b/server/src/plugins/obo-token.ts
@@ -2,7 +2,7 @@ import { FastifyReply, FastifyRequest } from 'fastify';
 import { getAzureADClient } from '@app/auth/get-auth-client';
 import { getDuration } from '@app/helpers/duration';
 import { getLogger } from '@app/logger';
-import { getOnBehalfOfAccessToken } from '@app/auth/on-behalf-of';
+import { getOnBehalfOfAccessToken, refreshOnBehalfOfAccessToken } from '@app/auth/on-behalf-of';
 import fastifyPlugin from 'fastify-plugin';
 import { isDeployed } from '@app/config/env';
 import { oboRequestDuration } from '@app/auth/cache/cache-gauge';
@@ -71,8 +71,12 @@ export const oboAccessTokenPlugin = fastifyPlugin(
         { schema: { params: Type.Object({ appName: Type.Enum(ApiClientEnum) }) } },
         async (req, reply) => {
           const { appName } = req.params;
+          const { navIdent, accessToken, trace_id, span_id } = req;
 
-          await getOboToken(appName, req, reply);
+          const authClient = await getAzureADClient();
+          const cacheKey = `${navIdent}-${appName}`;
+
+          await refreshOnBehalfOfAccessToken(authClient, accessToken, cacheKey, appName, trace_id, span_id);
 
           return reply.status(200).send('Refreshed');
         },