From 68eb0f8dd9aef6c620cc821ad514cb40a0ab2720 Mon Sep 17 00:00:00 2001 From: Maidul Islam Date: Fri, 15 Dec 2023 15:40:20 -0500 Subject: [PATCH] throw bad request when max uses reached --- backend/src/controllers/v1/universalAuthController.ts | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/backend/src/controllers/v1/universalAuthController.ts b/backend/src/controllers/v1/universalAuthController.ts index 65f59efbe..0e8818985 100644 --- a/backend/src/controllers/v1/universalAuthController.ts +++ b/backend/src/controllers/v1/universalAuthController.ts @@ -129,9 +129,14 @@ export const renewAccessToken = async (req: Request, res: Response) => { accessTokenTTL, accessTokenLastRenewedAt, accessTokenMaxTTL, - createdAt: accessTokenCreatedAt + createdAt: accessTokenCreatedAt, + accessTokenNumUses, + accessTokenNumUsesLimit } = identityAccessToken; + if (accessTokenNumUses >= accessTokenNumUsesLimit) { + throw BadRequestError({ message: "Unable to renew because access token number of uses limit reached" }) + } // ttl check if (accessTokenTTL > 0) {