missing refreshToken in response

[seankanderson]

I was crazy confused until I noticed that these functions are not returning a refreshToken.

function authenticate(req, res, next) {
    const { email, password } = req.body;
    const ipAddress = req.ip;
    accountService.authenticate({ email, password, ipAddress })
        .then(({ refreshToken, ...account }) => {
            setTokenCookie(res, refreshToken);
            res.json(account);  // missing refresh token
        })
        .catch(next);
}

function refreshToken(req, res, next) {
    const token = req.cookies.refreshToken;
    const ipAddress = req.ip;
    accountService.refreshToken({ token, ipAddress })
        .then(({ refreshToken, ...account }) => {
            setTokenCookie(res, refreshToken);
            res.json(account); // missing refresh token
        })
        .catch(next);
}

When I refactored to include the refreshToken it, of course, then showed up in the response.

res.json({...account, refreshToken});

[ofishea]

I've been battling same refreshtoken issue as well, i tried this your solution but it didn't work either.