feat: add support for refresh tokens in internal stores

server/api/auth/refresh.post.ts

@@ -0,0 +1,27 @@
+import { ClientError } from 'nice-grpc';
+import { RefreshSchema } from '#shared/api-types';
+import type { ApiAuthLogin } from '#shared/api-types';
+
+export default defineEventHandler(async (event): Promise<ApiAuthLogin> => {
+	const body = await readZodBody(event, RefreshSchema);
+	const grpc = useApiGrpc(event);
+
+	try {
+		const res = await grpc.login({
+			refreshToken: body.token,
+			grantType: 'refresh_token'
+		});
+
+		return {
+			accessToken: res.accessToken,
+			refreshToken: res.refreshToken
+		};
+	} catch (error: unknown) {
+		if (error instanceof ClientError) {
+			if (error.details === 'INVALID_ARGUMENT: Invalid or missing refresh token') {
+				throw createApiError('UNAUTHENTICATED');
+			}
+		}
+		throw error;
+	}
+});

server/utils/enforceAuth.ts

@@ -20,10 +20,7 @@ export function getAuthContext(event: H3Event): AuthContext | null {
 export function enforceLoggedIn(event: H3Event): AuthContext {
 	const context = getAuthContext(event);
 	if (!context) {
-		throw createError({
-			status: 401,
-			message: 'This action requires authentication'
-		});
+		throw createApiError('UNAUTHENTICATED');
 	}
 	return context;
 }