Function createRefreshToken

internal/models/refresh_token.go:175–209

(tx *storage.Connection, user *User, oldToken *RefreshToken, params *GrantParams)

}

func createRefreshToken(tx *storage.Connection, user *User, oldToken *RefreshToken, params *GrantParams) (*RefreshToken, error) {
	token := &RefreshToken{
		UserID: user.ID,
		Token:  crypto.SecureAlphanumeric(12),
		Parent: "",
	}
	if oldToken != nil {
		token.Parent = storage.NullString(oldToken.Token)
		token.SessionId = oldToken.SessionId
	}

	if token.SessionId == nil {
		session, err := NewSession(user.ID, params.FactorID)
		if err != nil {
			return nil, errors.Wrap(err, "error instantiating new session object")
		}

		session.ApplyGrantParams(params)

		if err := tx.Create(session); err != nil {
			return nil, errors.Wrap(err, "error creating new session")
		}

		token.SessionId = &session.ID
	}

	if err := tx.Create(token); err != nil {
		return nil, errors.Wrap(err, "error creating refresh token")
	}

	if err := user.UpdateLastSignInAt(tx); err != nil {
		return nil, errors.Wrap(err, "error update user`s last_sign_in field")
	}
	return token, nil
}