Pfthb

I'm having trouble understanding how to send back a refresh token to get a new access token.

I've looked at this documentation: https://developer.microsoft.com/en-us/graph/docs/concepts/nodejs and I basically need help with Authenticate User- step4 but they don't seem to go into more details.

I tried using passport-oauth2-refresh but I think because I'm using Azure AD, I kept getting Error: Cannot register: not an OAuth2 strategy. So I've decided to try to manually check the expiry instead.

I am able to retrieve a refresh token (POST /token with req.user.refreshToken) along with my access token and I store it in json but I don't know how to send it back.

Here is my index.js:

const express = require('express');
 const router = express.Router();
 const graphHelper = require('../utils/graphHelper.js');
 const passport = require('passport');
 const request = require('request');
 const SERVER = process.env.SERVER;

 let user_id = null;


 router.get('/', (req, res) => 
 if (!req.isAuthenticated()) 
 res.render('login');
 else 
 renderBotPage(req, res);
 
);


 router.get('/login',
 passport.authenticate('azuread-openidconnect', failureRedirect: '/'),
 (req, res) => 
 res.redirect('/');
 );


router.get('/token',
 function (req, res, next) 
 passport.authenticate('azuread-openidconnect',
 
 response: res, // required
 failureRedirect: '/'
 
 )
,
function (req, res) 
 const options = 
 headers: 
 'content-type' : 'application/json'
 ,
 method: 'POST',
 url: SERVER,
 json: 
 'accessToken': req.user.accessToken,
 'refreshToken': req.user.refreshToken
 
 ;
 request(options,
 function (error, response, body) 
 if (!error && response.statusCode === 200) 
 console.log(body)
 
 
 );
 console.log('We received a return from AzureAD get token.');
 res.redirect('/');

);


 router.post('/token',
 function (req, res, next) 
 passport.authenticate('azuread-openidconnect',
 
 response: res, // required
 failureRedirect: '/'
 
 )(req, res, next);
,

function (req, res) 
 console.log('res after first token function', res);
 const options = 
 headers: 
 'content-type' : 'application/json'
 ,
 method: 'POST',
 url: SERVER,
 json: 
 'accessToken': req.user.accessToken,
 'refreshToken': req.user.refreshToken
 
 ;
 request(options,
 function (error, response, body) 
 if (!error && response.statusCode === 200) 
 console.log(body)
 
 
 );
 res.redirect('/');
 );

 function renderBotPage(req, res) 
 graphHelper.getUserData(req.user.accessToken, (err, user) => 

 if (!err) 
 res.render('chatbotOn', 
 display_name: user.body.displayName,
 user_id:user.body.id
 );
 else 
 // Catch of Expired token error
 if (hasAccessTokenExpired(err)) 

 req.session.destroy(() => 
 req.logOut();
 res.clearCookie('graphNodeCookie');
 res.status(200);
 res.redirect('/');
 );
 
 renderError(err, res);
 res.render('chatbotOn', 
 display_name: "Random User"
 );
 
 );
 

 router.get('/disconnect', (req, res) => 
 req.session.destroy(() => 
 req.logOut();
 res.clearCookie('graphNodeCookie');
 res.status(200);
 res.redirect('/');
 );
 );


 function hasAccessTokenExpired(e) 
 let expired;

 if (!e.innerError) 
 expired = false;
 else 
 expired = e.forbidden &&
 e.message === 'InvalidAuthenticationToken' &&
 e.response.error.message === "Le token d'accès a expiré.";
 
 return expired;
 

 function renderError(e, res) 
 e.innerError = (e.response) ? e.response.text : '';
 res.render('error', 
 error: e
 );
 

 module.exports = router;

My app.js

 const callback = (iss, sub, profile, accessToken, refreshToken, done) => 
 done(null, 
 profile,
 accessToken,
 refreshToken
 );
;

 passport.use(new OIDCStrategy(config.creds, callback));

And here is my graphHelper.js:

 const request = require('superagent');
 function getUserData(accessToken, callback) 
 request
 .get('https://graph.microsoft.com/beta/me')
 .set('Authorization', 'Bearer ' + accessToken)
 .end((err, res) => 
 callback(err, res);
 );
 
 exports.getUserData = getUserData;

here is my config.js:

 module.exports = 
 creds: 
 redirectUrl: 'http://localhost:3000/token',
 clientID: 'xxxxx', // regular
 clientSecret: 'xxxxx', // regular
 identityMetadata: 
 'xxxxxx',
 allowHttpForRedirectUrl: true, // For development only
 responseType: 'code id_token',
 validateIssuer: false, // For development only
 responseMode: 'form_post',
 scope: ['openid', 'offline_access', 'Contacts.Read', 
 'Calendars.ReadWrite'
 ]

 , 
 ;