Help me with my middleware oauth retry request, using refresh token

I am developing a middleware that puts my autorizathion token in the request, and identifies if it has experienced, has expired, I make a new request with the refresh token, and then I need to redo the initial request, but I only have thenext()inside the response, How do I change the old token for the new one? and the next does not accept parameters.

response(next) {
    return new Promise((resolve, reject) => {
      next()
        .then(resp => resolve(resp))
        .catch((resp) => {
          const accessToken = resp.request().headers().authorization;
          const refreshToken = retrieveRefreshToken();
          const status = resp.responseStatus;
          if (accessToken && refreshToken && status === 401) {
            refreshAuth(refreshToken, resp)
              .then((newRequest) => {
                next(); // in here i need insert new token. ps: request.response().enhance() not working
              })
              .catch(() => {
                reject(resp);
              });
          } else {
            reject(resp);
          }
        });
    });
  },

[tulios]

Version 2.20.0 is out, give it a try. I’ll consider this solved for now but feel free to create a new issue or to comment on this one.

Thanks for the reporting!

[tulios]

Hey, commit 6d85a110c75d5fc43fc8323cd40d6e788840940d introduces a new feature called “renew”. Now, from the response phase of a middleware you can re-run the middleware stack.

example:

const AccessTokenMiddleware = () => {
  // maybe this is stored elsewhere, here for simplicity
  let accessToken = null

  return () => ({
    request(request) {
      return Promise
        .resolve(accessToken)
        .then((token) => token || fetchAccessToken())
        .then((token) => {
          accessToken = token
          return request.enhance({
            headers: { 'Authorization': `Token ${token}` }
          })
        })
    },
    response(next, renew) {
      return next().catch(response => {
        if (response.status() === 401) { // token expired
          accessToken = null
          return renew()
        }

        return next()
      })
    }
  })
}

In this example, I’m running the middleware stack after receiving a token expired (401). I think you can adapt this to your needs.

If you can, please try out the code in master. I’ll probably release a new version tomorrow. What do you think about the solution, would it solve your problem? Thanks.

NOTE: I’ve played with different options, including accepting a new request object in the next function but this could cause some issues when you have a stack with several middlewares configured. This approach preserves the lifecycle and makes sure all middlewares are re-executed.