From 822c8fb5ab98b173ee8551d224dfc2fcdb2ee483 Mon Sep 17 00:00:00 2001
From: Jonathan Barrow <jonbarrow1998@gmail.com>
Date: Sat, 3 Jan 2026 14:12:23 -0500
Subject: [PATCH] feat: make OAuth refresh tokens single use

---
 src/database.ts | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/database.ts b/src/database.ts
index 7441771..155d9ec 100644
--- a/src/database.ts
+++ b/src/database.ts
@@ -137,6 +137,11 @@ async function getPNIDByOAuthToken(token: string, expectedSystemType: SystemType
 			}
 		}
 
+		// * Refresh tokens are single use
+		if (expectedTokenType === TokenType.OAuthRefresh) {
+			await oauthToken.deleteOne();
+		}
+
 		return pnid;
 	} catch (error: any) {
 		// TODO - Handle error