Is refreshing taken care of by this library?

[ahmadspeechify]

Is refreshing the token with a refresh token taken care of by this library, or is that something I need to take care off on the consumer side?

[kalliub]

Any updates?
@ahmadspeechify Did you succeed on your refresh token implementation?

[pbteja1998]

No, refresh token implementation is outside the scope of this library. You can go to Remix discord and see a thread about this there. There was some discussion going on related to remix-auth and refresh-tokens. Try to find that discussion. But no, this library won't automatically refresh tokens.

Also, you will only need to refresh the tokens, if you are using some google APIs. If all you are doing is using remix-auth-google to implement the login functionality, you don't need to care about the access/refresh tokens.

[ahmadspeechify]

Any updates? @ahmadspeechify Did you succeed on your refresh token implementation?

@kalliub , I couldn't.

[decanTyme]

I managed to do it with:

// Route /auth/refresh

import { UserRefreshClient } from "google-auth-library"

export async function loader({ request }: LoaderFunctionArgs) {
  const auth = await authenticator.isAuthenticated(request, {
    failureRedirect: "/login",
  })

  if (!auth.refreshToken) {
    return authenticator.logout(request, { redirectTo: "/login" })
  }

  // or google.auth.OAuth2()
  const userClient = new UserRefreshClient({
    clientId: server.env.G_OAUTH_CLIENT_ID,
    clientSecret: server.env.G_OAUTH_SECRET,
    refreshToken: auth.refreshToken,
  })

  try {
    const { credentials } = await userClient.refreshAccessToken()
    const session = await getSession(request)

    const updatedSession: UserSessionData = {
      ...auth,
      accessToken: credentials.access_token,
      refreshToken: credentials.refresh_token,
      extraParams: {
        ...auth.extraParams,
        scope: credentials.scope,
        id_token: credentials.id_token,
      },
    }

    session.set("user", updatedSession)

    const fromUrl = new URL(request.url).searchParams.get("from")

    return redirect(fromUrl || "/dashboard", {
      headers: { "Set-Cookie": await commitSession(session) },
    })
  } catch (error) {
    console.error(error)
  }

  return authenticator.logout(request, { redirectTo: "/login" })
}

Then just catch auth errors and redirect to that endpoint.