feat(user-auth): improve token refresh logic and default values

backend/src/db/migrations/20250428134716_add-org-user-token-expiration-setting.ts

@@ -1,12 +1,16 @@
 import { Knex } from "knex";
 
+import { getConfig } from "@app/lib/config/env";
+
 import { TableName } from "../schemas";
 
 export async function up(knex: Knex): Promise<void> {
+  const appCfg = getConfig();
   if (!(await knex.schema.hasColumn(TableName.Organization, "userTokenExpiration"))) {
     await knex.schema.alterTable(TableName.Organization, (t) => {
-      t.string("userTokenExpiration").defaultTo("30d").notNullable();
+      t.string("userTokenExpiration");
     });
+    await knex(TableName.Organization).update({ userTokenExpiration: appCfg.JWT_REFRESH_LIFETIME });
   }
 }
 

backend/src/db/schemas/organizations.ts

@@ -29,7 +29,7 @@ export const OrganizationsSchema = z.object({
   privilegeUpgradeInitiatedByUsername: z.string().nullable().optional(),
   privilegeUpgradeInitiatedAt: z.date().nullable().optional(),
   bypassOrgAuthEnabled: z.boolean().default(false),
-  userTokenExpiration: z.string().default("30d")
+  userTokenExpiration: z.string().nullable().optional()
 });
 
 export type TOrganizations = z.infer<typeof OrganizationsSchema>;