update hak akses dan perbaikan api pembuatan tiket

server/api/auth/keycloak-callback.get.ts

@@ -153,6 +153,7 @@ export default defineEventHandler(async (event) => {
     // Parse token payloads for immediate availability
     let accessTokenPayload;
     let idTokenPayloadFull;
+    let refreshTokenPayload;
     try {
       accessTokenPayload = JSON.parse(
         Buffer.from(tokens.access_token.split(".")[1], "base64").toString(),
@@ -160,12 +161,26 @@ export default defineEventHandler(async (event) => {
       idTokenPayloadFull = JSON.parse(
         Buffer.from(tokens.id_token.split(".")[1], "base64").toString(),
       );
+      if (tokens.refresh_token) {
+        refreshTokenPayload = JSON.parse(
+          Buffer.from(tokens.refresh_token.split(".")[1], "base64").toString(),
+        );
+      }
     } catch (parseError) {
       console.error("❌ Failed to parse token payloads:", parseError);
       const errorMsg = encodeURIComponent("Invalid token format");
       return sendRedirect(event, `/LoginPage?error=${errorMsg}`);
     }
 
+    // Determine session expiration from refresh token (preferred) or default
+    const expiresAt = refreshTokenPayload?.exp 
+      ? refreshTokenPayload.exp * 1000 
+      : Date.now() + SESSION_DURATION * 1000;
+
+    const createdAt = refreshTokenPayload?.iat
+      ? refreshTokenPayload.iat * 1000
+      : Date.now();
+
     // Create session data
     const sessionData = {
       user: {
@@ -177,8 +192,8 @@ export default defineEventHandler(async (event) => {
       accessToken: tokens.access_token,
       idToken: tokens.id_token,
       refreshToken: tokens.refresh_token,
-      expiresAt: Date.now() + SESSION_DURATION * 1000,
-      createdAt: Date.now(),
+      expiresAt: expiresAt,
+      createdAt: createdAt,
       scope: accessTokenPayload.scope || "openid email profile",
       status: "authenticated",
     };

server/api/auth/session.get.ts

@@ -34,6 +34,7 @@ export default defineEventHandler(async (event) => {
     // Parse token payloads on-demand from tokens
     let accessTokenPayload = null;
     let idTokenPayload = null;
+    let refreshTokenPayload = null;
     
     try {
       if (session.accessToken) {
@@ -49,10 +50,22 @@ export default defineEventHandler(async (event) => {
           idTokenPayload = JSON.parse(Buffer.from(idParts[1], 'base64').toString());
         }
       }
+
+      if (session.refreshToken) {
+        const refreshParts = session.refreshToken.split('.');
+        if (refreshParts.length >= 2) {
+          refreshTokenPayload = JSON.parse(Buffer.from(refreshParts[1], 'base64').toString());
+        }
+      }
     } catch (parseError) {
       console.warn('⚠️ Failed to parse token payloads:', parseError);
     }
     
+    // Use dynamic expiration from refresh token if available
+    if (refreshTokenPayload?.exp) {
+      session.expiresAt = refreshTokenPayload.exp * 1000;
+    }
+    
 
     const isExpired = Date.now() > session.expiresAt;
     console.log('   Is Expired:', isExpired);

server/api/auth/session.patch.ts

@@ -0,0 +1,71 @@
+// server/api/auth/session.patch.ts
+export default defineEventHandler(async (event) => {
+  console.log("🔄 Session update endpoint called");
+
+  const sessionId = getCookie(event, "user_session");
+  
+  if (!sessionId) {
+    console.log("❌ No session cookie found");
+    throw createError({
+      statusCode: 401,
+      statusMessage: "No session cookie found",
+    });
+  }
+
+  try {
+    // Get the update data from request body
+    const body = await readBody(event);
+    const { accessToken, idToken, refreshToken, expiresAt } = body;
+
+    // Validate that at least one token is provided
+    if (!accessToken && !idToken && !refreshToken) {
+      throw createError({
+        statusCode: 400,
+        statusMessage: "At least one token must be provided",
+      });
+    }
+
+    // Get session store functions
+    const { getSession, updateSession } = await import('~/server/utils/sessionStore');
+    
+    // Verify session exists
+    const session = getSession(sessionId);
+    if (!session) {
+      console.log("❌ Session not found");
+      deleteCookie(event, "user_session");
+      throw createError({
+        statusCode: 401,
+        statusMessage: "Session not found or expired",
+      });
+    }
+
+    // Prepare updates object
+    const updates: any = {};
+    if (accessToken) updates.accessToken = accessToken;
+    if (idToken) updates.idToken = idToken;
+    if (refreshToken) updates.refreshToken = refreshToken;
+    if (expiresAt) updates.expiresAt = expiresAt;
+
+    // Update the session
+    const updated = updateSession(sessionId, updates);
+    
+    if (!updated) {
+      throw createError({
+        statusCode: 500,
+        statusMessage: "Failed to update session",
+      });
+    }
+
+    console.log("✅ Session updated successfully");
+    return {
+      success: true,
+      message: "Session updated successfully",
+    };
+  } catch (error: any) {
+    console.error("❌ Failed to update session:", error);
+    throw createError({
+      statusCode: error.statusCode || 500,
+      statusMessage: error.statusMessage || "Failed to update session",
+    });
+  }
+});