feat: refresh token api 방어 코드 추가

sullog-official · Oct 23, 2023 · dc84f39 · dc84f39
1 parent b5ba20c
commit dc84f39
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/src/pages/api/refresh.ts b/src/pages/api/refresh.ts
@@ -33,8 +33,15 @@ export default async function handler(
       validateStatus: null,
     });
 
-    setAccessToken(response.headers[ACCESS_TOKEN_KEY], { req, res });
-    setRefreshToken(response.headers[REFRESH_TOKEN_KEY], { req, res });
+    const newAccessToken = response.headers[ACCESS_TOKEN_KEY];
+    const newRefreshToken = response.headers[REFRESH_TOKEN_KEY];
+
+    if (!newAccessToken || !newRefreshToken) {
+      throw new Error('Invalid tokens.');
+    }
+
+    setAccessToken(newAccessToken, { req, res });
+    setRefreshToken(newRefreshToken, { req, res });
 
     res.status(200).json({ result: true });
   } catch (err) {