feat(api): Implement refresh token strategy

[alepefe]

Remember to add the following code in shared/config/.env and .env.test

REFRESH_TOKEN_SECRET=refresh_token_secret
REFRESH_TOKEN_EXPIRES_IN=30d

This pull request introduces a refresh token mechanism to the authentication system, enhancing the security and usability of the token-based authentication. The most important changes include the addition of new methods for handling refresh tokens, updates to existing services and DTOs, and the implementation of integration tests for the new functionality.

Authentication Enhancements:

• Added refreshToken method to AuthenticationController to handle refresh token requests.
• Implemented refreshAuthTokens method in AuthenticationService to refresh authentication tokens using the refresh token.
• Updated logIn method in AuthenticationService to return both access and refresh tokens.

JWT Management:

• Added refreshAuthTokens and createAuthTokenPair methods to JwtManager to handle token creation and refreshing.
• Updated signAccessToken and createRefreshToken methods in JwtManager to generate tokens with expiration times.

Configuration and Utilities:

• Added refresh token configuration to auth-config.handler.ts and .env.test file. [1] [2]
• Introduced TimeUtils utility for parsing duration strings into seconds.

Integration Tests:

• Added integration tests for the refresh token functionality in refresh-token.spec.ts.
• Updated existing tests to accommodate changes in token handling. [1] [2]

DTO and Contract Updates:

• Updated UserWithAuthTokens DTO to include refresh token information. [1] [2]
• Added AuthTokenPair type and RefreshTokenSchema for handling refresh token responses and requests. [1] [2]
• Updated auth.contract.ts to include the new refreshToken endpoint.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
tnc-blue-carbon-cost-tool-ghps	❌ Failed (Inspect)			Jan 16, 2025 0:50am

[alepefe]

Waiting to validate this so the frontend guys can later adapt their code.