diff --git a/src/app/api/auth/access-token/route.ts b/src/app/api/auth/access-token/route.ts index f977278..81bcb1a 100644 --- a/src/app/api/auth/access-token/route.ts +++ b/src/app/api/auth/access-token/route.ts @@ -26,7 +26,10 @@ export async function POST() { throw createMissingRefreshTokenError(); } - const serverApi = await createServerApi({accessToken: refreshToken}); + const serverApi = await createServerApi({ + accessToken: refreshToken, + authCookieName: 'refreshToken', + }); const {data} = await serverApi.post( API_ENDPOINTS.auth.accessToken, undefined, diff --git a/src/shared/api/server-client.ts b/src/shared/api/server-client.ts index 0040bef..4e10585 100644 --- a/src/shared/api/server-client.ts +++ b/src/shared/api/server-client.ts @@ -10,6 +10,7 @@ import {createApiConfigurationError, normalizeApiError} from './api-error'; interface CreateServerApiOptions { accessToken?: string; + authCookieName?: 'accessToken' | 'refreshToken'; includeAccessToken?: boolean; } @@ -41,6 +42,7 @@ const getHttpsAdminApiBaseUrl = (adminApiBaseUrl: string | undefined) => { export const createServerApi = async ({ accessToken, + authCookieName = 'accessToken', includeAccessToken = true, }: CreateServerApiOptions = {}): Promise => { const {adminApiBaseUrl} = getServerEnv(); @@ -60,7 +62,7 @@ export const createServerApi = async ({ config.headers.Accept = 'application/json'; if (includeAccessToken && resolvedAccessToken) { - config.headers.Authorization = `Bearer ${resolvedAccessToken}`; + config.headers.Cookie = `${authCookieName}=${resolvedAccessToken}`; } return config;