This commit is contained in:
rmoren97 2026-02-07 15:33:08 -08:00
parent ff0454537f
commit ca43e4aee8

View File

@ -19,7 +19,7 @@ export async function verifyPassword(password: string, hashedPassword: string):
// ─── JWT Tokens ────────────────────────────────────────────────── // ─── JWT Tokens ──────────────────────────────────────────────────
export function generateAccessToken(payload: SessionPayload): string { export function generateAccessToken(payload: SessionPayload): string {
return jwt.sign(payload, process.env.JWT_SECRET!, { expiresIn: '1h' }) return jwt.sign(payload, process.env.JWT_ACCESS_SECRET!, { expiresIn: '1h' })
} }
export function generateRefreshToken(payload: SessionPayload): string { export function generateRefreshToken(payload: SessionPayload): string {
@ -28,7 +28,7 @@ export function generateRefreshToken(payload: SessionPayload): string {
export function verifyAccessToken(token: string): SessionPayload | null { export function verifyAccessToken(token: string): SessionPayload | null {
try { try {
return jwt.verify(token, process.env.JWT_SECRET!) as SessionPayload return jwt.verify(token, process.env.JWT_ACCESS_SECRET!) as SessionPayload
} catch { } catch {
return null return null
} }
@ -49,7 +49,7 @@ export function generate2FACode(): string {
} }
export function hash2FACode(code: string): string { export function hash2FACode(code: string): string {
const hmac = crypto.createHmac('sha256', process.env.JWT_SECRET!) const hmac = crypto.createHmac('sha256', process.env.TWO_FACTOR_SECRET!)
hmac.update(code) hmac.update(code)
return hmac.digest('hex') return hmac.digest('hex')
} }