From d80bf00d16048c0f1dbc5635ce6bf52411d44346 Mon Sep 17 00:00:00 2001
From: Frederick Muriuki Muriithi
Date: Tue, 14 May 2024 09:27:25 +0300
Subject: Enable client to automatically request a refresh token.

---
 gn2/wqflask/oauth2/client.py | 20 ++++++++++++++++----
 1 file changed, 16 insertions(+), 4 deletions(-)

(limited to 'gn2/wqflask/oauth2')

diff --git a/gn2/wqflask/oauth2/client.py b/gn2/wqflask/oauth2/client.py
index c16b705d..f4ad4f00 100644
--- a/gn2/wqflask/oauth2/client.py
+++ b/gn2/wqflask/oauth2/client.py
@@ -6,6 +6,7 @@ from urllib.parse import urljoin
 
 from flask import current_app as app
 from pymonad.either import Left, Right, Either
+from authlib.jose import jwt
 from authlib.integrations.requests_client import OAuth2Session
 
 from gn2.wqflask.oauth2 import session
@@ -39,11 +40,22 @@ def user_logged_in():
 
 
 def oauth2_client():
+    def __update_token__(token, refresh_token=None, access_token=None):
+        """Update the token when refreshed."""
+        session.set_user_token(token)
+
     def __client__(token) -> OAuth2Session:
-        return OAuth2Session(
-            oauth2_clientid(), oauth2_clientsecret(),
-            scope=SCOPE, token_endpoint_auth_method="client_secret_post",
-            token=token)
+        _jwt = jwt.decode(token["access_token"],
+                          app.config["AUTH_SERVER_SSL_PUBLIC_KEY"])
+        client = OAuth2Session(
+            oauth2_clientid(),
+            oauth2_clientsecret(),
+            scope=SCOPE,
+            token_endpoint=urljoin(authserver_uri(), "/auth/token"),
+            token_endpoint_auth_method="client_secret_post",
+            token=token,
+            update_token=__update_token__)
+        return client
     return session.user_token().either(
         lambda _notok: __client__(None),
         lambda token: __client__(token))
-- 
cgit v1.2.3