Try It Yourself - SyntaxStudy Editor

HTML / CSS / JS

import { ApolloServer } from '@apollo/server';
import { expressMiddleware } from '@apollo/server/express4';
import cookieParser from 'cookie-parser';
import express from 'express';

const REFRESH_TOKEN_EXPIRY = '30d';
const ACCESS_TOKEN_EXPIRY  = '15m';

// Store refresh token in httpOnly cookie
      res.cookie('refresh_token', refreshToken, {
        httpOnly: true,
        secure: process.env.NODE_ENV === 'production',
        sameSite: 'strict',
        maxAge: 30 * 24 * 60 * 60 * 1000, // 30 days in ms
      });

return { accessToken, user };
    },

refreshToken: async (_, __, { req, res }) => {
      const token = req.cookies.refresh_token;
      if (!token) throw new Error('No refresh token');
      const { userId } = jwt.verify(token, REFRESH_SECRET);
      const user = await db.users.findById(userId);
      const newAccessToken = jwt.sign({ userId }, JWT_SECRET, { expiresIn: ACCESS_TOKEN_EXPIRY });
      return { accessToken: newAccessToken, user };
    },

logout: (_, __, { res }) => {
      res.clearCookie('refresh_token');
      return true;
    },
  },
};