P3.3: Add /auth/refresh endpoint (token renewal) #8

Closed
opened 2026-09-08 04:41:45 +00:00 by rock · 1 comment
Owner

Summary

POST /auth/refresh accepts refresh_token, exchanges with Authentik, returns new JWT.

Code repo: rock/homelab-frontendinternal/proxy/auth_endpoints.go

Acceptance Criteria

  • Accepts {"refresh_token":"..."}
  • Returns new access_token + refresh_token
  • 401 on expired/revoked refresh token
  • Unit tests

Depends on

  • P3.1 (same file, same config)
## Summary `POST /auth/refresh` accepts refresh_token, exchanges with Authentik, returns new JWT. **Code repo:** `rock/homelab-frontend` — `internal/proxy/auth_endpoints.go` ## Acceptance Criteria - [ ] Accepts `{"refresh_token":"..."}` - [ ] Returns new access_token + refresh_token - [ ] 401 on expired/revoked refresh token - [ ] Unit tests ## Depends on - P3.1 (same file, same config)
rock added this to the Phase 3: OAuth2 Token Exchange & Identity Propagation milestone 2026-09-08 04:41:45 +00:00
rock added the area/autharea/gatewaytype/featurestatus/todopriority/high labels 2026-09-08 04:41:47 +00:00
rock self-assigned this 2026-09-08 04:41:49 +00:00
rock added this to the API-GW OAuth project 2026-09-08 04:43:49 +00:00
rock closed this issue 2026-09-09 00:00:51 +00:00
Author
Owner

Closed by homelab-frontend PR #18 (bundled with P3.1): riotpiao-poimen/homelab-frontend#18

Closed by homelab-frontend PR #18 (bundled with P3.1): https://forgejo.riotpiao.com/riotpiao-poimen/homelab-frontend/pulls/18
Sign in to join this conversation.