From 5ae661951c608dca0e90d7a968e0f8b9fa674ccc Mon Sep 17 00:00:00 2001
From: do-huni <orangnlp@gmail.com>
Date: Tue, 23 Jul 2024 19:29:09 +0900
Subject: [PATCH] feat(auth): set tokens' expires

---
 src/APIs/auth/auth.controller.ts | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/src/APIs/auth/auth.controller.ts b/src/APIs/auth/auth.controller.ts
index e49c4d5..b3101df 100644
--- a/src/APIs/auth/auth.controller.ts
+++ b/src/APIs/auth/auth.controller.ts
@@ -44,20 +44,24 @@ export class AuthController {
 
     // 클라이언트 도메인 설정
     const clientDomain = process.env.CLIENT_DOMAIN;
+    const oneDay = 24 * 60 * 60 * 1000; // 하루(밀리초)
+    const accessExpiryDate = new Date(Date.now() + oneDay);
+    const refreshExpiryDate = new Date(Date.now() + oneDay * 30);
 
     res.cookie('accessToken', accessToken, {
       httpOnly: true,
       domain: clientDomain,
       sameSite: 'none',
       secure: true,
+      expires: accessExpiryDate,
     });
     res.cookie('refreshToken', refreshToken, {
       httpOnly: true,
       domain: clientDomain,
       sameSite: 'none',
       secure: true,
+      expires: refreshExpiryDate,
     });
-    res.cookie('isLoggedIn', true, { httpOnly: false, domain: clientDomain });
 
     return res.redirect(process.env.CLIENT_URL);
     // return res.send();
@@ -83,12 +87,15 @@ export class AuthController {
         req.cookies.refreshToken,
       );
       const clientDomain = process.env.CLIENT_DOMAIN;
+      const oneDay = 24 * 60 * 60 * 1000; // 하루(밀리초)
+      const accessExpiryDate = new Date(Date.now() + oneDay);
 
       res.cookie('accessToken', newAccessToken, {
         httpOnly: true,
         domain: clientDomain,
         sameSite: 'none',
         secure: true,
+        expires: accessExpiryDate,
       });
       return res.send();
     } catch (e) {
@@ -106,7 +113,6 @@ export class AuthController {
         sameSite: 'none',
         secure: true,
       });
-      res.clearCookie('isLoggedIn', { httpOnly: false, domain: clientDomain });
 
       throw new UnauthorizedException(e.message);
     }