prevent refreshing a token that is not able to be refreshed

fr0tt · Oct 14, 2023 · c81c9c3 · c81c9c3
1 parent 08c9888
commit c81c9c3
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/app/Http/Controllers/AuthController.php b/app/Http/Controllers/AuthController.php
@@ -3,6 +3,7 @@
 namespace App\Http\Controllers;
 
 use Illuminate\Http\Request;
+use Illuminate\Http\Response;
 use Illuminate\Support\Facades\Auth;
 use Illuminate\Support\Facades\Password;
 use Illuminate\Support\Facades\Hash;
@@ -34,8 +35,11 @@ public function me(Request $request)
         return response()->json(['data' => $request->user()]);
     }
 
-    public function refresh()
+    public function refresh(Request $request)
     {
+        if (!auth('api')->check()) {
+            return response()->json('', Response::HTTP_BAD_REQUEST);
+        }
         $data = [
             "token" => [
                 "access_token" => Auth::refresh(),