SWAMPy

✎ CARVE FLESH

EDITING: refresh.php

<?php

// admin/auth/refresh.php

require_once __DIR__ . '/../../config/database.php';
require_once __DIR__ . '/../../helpers/response.php';
require_once __DIR__ . '/../../middleware/auth.php';
require_once __DIR__ . '/../../models/AdminUser.php';

use Firebase\JWT\JWT;
use Firebase\JWT\Key;

$refreshToken = $_COOKIE['refresh_token'] ?? '';

if (empty($refreshToken)) {
    json_error('AUTH_ERROR', 'Refresh token missing.', 401);
}

try {
    $secret = getJwtSecret();
    $decoded = JWT::decode($refreshToken, new Key($secret, 'HS256'));
    $userData = $decoded->data;

$pdo = require __DIR__ . '/../../config/database.php';
    $adminModel = new AdminUser($pdo);
    $user = $adminModel->findById($userData->id);

if (!$user || !$user['is_active']) {
        json_error('AUTH_ERROR', 'User inactive or not found.', 401);
    }

$newAccessToken = issueJwt($user['id'], $user['role'], 2);

json_success([
        'access_token' => $newAccessToken
    ]);

} catch (Exception $e) {
    json_error('AUTH_ERROR', 'Invalid refresh token.', 401);
}

CANCEL

Name	Type	Size	Modified	Actions
↩ ..	DIR	—	—
📄 change-password.php	PHP	1.9 KB	2026-07-03 12:03	EDIT
📄 error_log	?	2.3 KB	2026-08-21 18:50	EDIT
📄 login.php	PHP	1.7 KB	2026-07-02 10:29	EDIT
📄 refresh.php	PHP	1 KB	2026-07-02 10:29	EDIT