fix: allow the refresh and revoke token to be handled by the client

Author: Aldiwildan77

core/entity/discord.go

@@ -61,7 +61,6 @@ func (at *AccessToken) ToHTTPCookies() Cookies {
 
 type RefreshTokenRequest struct {
 	RefreshToken string `validate:"required"`
-	Referer      string `header:"Referer" validate:"required"`
 }
 
 func (rt *RefreshTokenRequest) Validate() error {
@@ -83,7 +82,6 @@ const (
 type RevokeTokenRequest struct {
 	AccessToken  string // cookie
 	RefreshToken string // cookie
-	Referer      string `header:"Referer" validate:"required"`
 }
 
 func (rt *RevokeTokenRequest) Validate() error {

handler/http/discord.go

@@ -80,7 +80,7 @@ func (d *discordHandler) RefreshToken(c echo.Context) error {
 		c.SetCookie(cookie)
 	}
 
-	return c.Redirect(http.StatusTemporaryRedirect, req.Referer)
+	return c.JSON(http.StatusOK, Response{Message: "Token refreshed"})
 }
 
 func (d *discordHandler) RevokeToken(c echo.Context) error {
@@ -108,7 +108,7 @@ func (d *discordHandler) RevokeToken(c echo.Context) error {
 		c.SetCookie(&http.Cookie{Name: key, MaxAge: -1})
 	}
 
-	return c.Redirect(http.StatusTemporaryRedirect, req.Referer)
+	return c.JSON(http.StatusOK, Response{Message: "Token revoked"})
 }
 
 func (d *discordHandler) GetUserByToken(c echo.Context) error {

handler/http/parser.discord.go

@@ -41,11 +41,6 @@ func parseRefreshTokenRequest(c echo.Context) (*entity.RefreshTokenRequest, erro
 
 	req.RefreshToken = refreshTokenCookie.Value
 
-	binder := &echo.DefaultBinder{}
-	if err := binder.BindHeaders(c, req); err != nil {
-		return nil, fmt.Errorf("%w: %s", entity.ErrorUnauthorized, err)
-	}
-
 	return req, nil
 }
 
@@ -74,11 +69,6 @@ func parseRevokeTokenRequest(c echo.Context) (*entity.RevokeTokenRequest, error)
 		req.AccessToken = accessTokenCookie.Value
 	}
 
-	binder := &echo.DefaultBinder{}
-	if err := binder.BindHeaders(c, req); err != nil {
-		return nil, fmt.Errorf("%w: %s", entity.ErrorUnauthorized, err)
-	}
-
 	return req, nil
 }