如何在护照Google OAuth Node.js中刷新令牌

如何解决如何在护照Google OAuth Node.js中刷新令牌

我发现很难用护照google oauth实现刷新令牌。 Passport.js是我自己使用护照执行的Google登录过程。我还将令牌和到期时间保存在MongoDB中。 refreshToken.js是我尝试使用google oauth api刷新令牌的尝试。为了清楚起见，我包括了两个文件中的代码。我遇到的问题是，令牌在第一个到期后会刷新，但在随后的到期时不起作用。

passport.js ，

module.exports = function (passport) {

passport.serializeUser(function(user,done) {
    done(null,user);
  });
  
  passport.deserializeUser(function(user,user);
  });
 
passport.use(new GoogleStrategy({
    clientID: process.env.GOOGLE_CLIENT_ID,clientSecret: process.env.GOOGLE_CLIENT_SECRET,callbackURL: 'http://localhost:3000/auth/google/callback'
},async (accesstoken,refreshToken,params,profile,done) => {
       //console.log('profile:',profile)
       console.log('refresh:',refreshToken)
       const idToken = params.id_token

       
       
       // find expiry_date so it can be save in the database,along with access and refresh token
      const expiry_date = dayjs().add(params.expires_in,"s").format("X");
      console.log('expiry:',expiry_date)
        
        const newUser = {
            googleId: profile.id,displayName: profile.displayName,firstName: profile.name.givenname,lastName: profile.name.familyName,image: profile.photos[0].value,accesstoken: params.access_token,idToken: params.id_token,expiryDate: expiry_date,refreshToken: refreshToken
        }
            try {
                let user = await usersCollection.findOne({ googleId: profile.id})
                        if (user) {
                            done(null,user)
                            
                        } else {
                            user = await usersCollection.insertOne(newUser)
                            done(null,user)
                        }
                    } catch (error) {
                        console.error(error)
                }
                
            }
        )
    )
    
    
     
      
 }

refreshTokens.js ，

 // create auth client
const oauth2client = new OAuth2(
auth.googleAuth.clientID,auth.googleAuth.clientSecret,auth.googleAuth.callbackURL
 );

   exports.checkToken = (req,res,next) => {
   // check for user

   if (!req.user) {
   console.log("NO USER");
   return next();
  }
   // subtract current time from stored expiry_date and see if less than 5 minutes (300s) 
  remain
   if (dayjs().subtract(req.user.expiryDate,"s").format("X") > -3000) {

 // set the current users access and refresh token
  oauth2client.setCredentials({
    id_token: req.user.idToken,access_token: req.user.accesstoken,refresh_token: req.user.refreshToken,expiry_date: req.user.expiryDate
   });

   // request a new token
  oauth2client.refreshAccesstoken(function(err,tokens) {
  if (err) return next(err);
 
   //save the new token and expiry_date
   usersCollection.findOneAndUpdate(
    { "googleId": req.user.googleId },{$set:{
      "accesstoken": tokens.access_token,"idToken": tokens.id_token,"expiryDate": tokens.expiry_date,"refreshToken": tokens.refresh_token
     }},{ upsert: true },function(err,doc) {
    if (err) return next(err);
    next();
    }
  );
 });
}
 next();
};