Code Coverage
 
Lines
Functions and Methods
Classes and Traits
Total
100.00%
23 / 23
100.00%
2 / 2
 CRAP
100.00%
1 / 1
RefreshTokenAction
100.00%
23 / 23
100.00%
2 / 2
 4
100.00%
1 / 1
 __construct
100.00%
1 / 1
100.00%
1 / 1
 1
 __invoke
100.00%
22 / 22
100.00%
1 / 1
 3
1<?php
2
3declare(strict_types=1);
4
5namespace App\Action\Auth;
6
7use App\Domain\Auth\Service\AuthService;
8use App\Domain\Exception\BadRequestException;
9use App\Renderer\JsonRenderer;
10use App\Support\Row;
11use Psr\Http\Message\ResponseInterface;
12use Psr\Http\Message\ServerRequestInterface;
13
14/**
15 * Refresh access token.
16 *
17 * POST /api/auth/refresh
18 */
19final readonly class RefreshTokenAction
20{
21    public function __construct(
22        private AuthService $authService,
23        private JsonRenderer $renderer
24    ) {}
25
26    public function __invoke(
27        ServerRequestInterface $request,
28        ResponseInterface $response,
29    ): ResponseInterface {
30        // Get request data
31        $data = (array)$request->getParsedBody();
32
33        // Validate required fields
34        $refreshToken = Row::nullableString($data, 'refreshToken');
35        if ($refreshToken === null || $refreshToken === '') {
36            throw new BadRequestException('Missing required field: refreshToken');
37        }
38
39        // Refresh tokens
40        $tokens = $this->authService->refreshToken($refreshToken);
41
42        // Get user info from the new access token
43        $user = $this->authService->getCurrentUser($tokens->accessToken);
44
45        // Return new tokens and user info
46        return $this->renderer->json($response, [
47            'success' => true,
48            'message' => 'Token refreshed successfully',
49            'data' => [
50                'user' => [
51                    'userId' => $user->userId,
52                    'username' => $user->username,
53                    'email' => $user->email,
54                    'role' => $user->role,
55                ],
56                'accessToken' => $tokens->accessToken,
57                'refreshToken' => $tokens->refreshToken,
58                'tokenType' => $tokens->tokenType,
59                'expiresIn' => $tokens->expiresIn,
60            ],
61        ]);
62    }
63}