order chnages

app/Http/Controllers/UserAuthController.php

@@ -6,76 +6,48 @@ use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Hash;
 use PHPOpenSourceSaver\JWTAuth\Facades\JWTAuth;
 use App\Models\User;
+use Illuminate\Support\Facades\Log;
 
 class UserAuthController extends Controller
 {
 
-    public function refreshToken()
+public function refreshToken()
-    {
+{
-        \Log::info('🔄 refreshToken() called');
+    Log::info('🔄 [JWT-REFRESH] called');
 
-        try {
+    try {
-            // Get current token
+        $newToken = JWTAuth::parseToken()->refresh();
-            $currentToken = JWTAuth::getToken();
 
-            if (!$currentToken) {
+        Log::info('✅ [JWT-REFRESH] Token refreshed');
-                \Log::warning('⚠ No token provided in refreshToken()');
-                return response()->json([
-                    'success' => false,
-                    'message' => 'Token not provided',
-                ], 401);
-            }
 
-            \Log::info('📥 Current Token:', ['token' => (string) $currentToken]);
+        return response()->json([
+            'success' => true,
+            'token' => $newToken,
+        ]);
 
-            // Try refreshing token
+    } catch (\PHPOpenSourceSaver\JWTAuth\Exceptions\TokenExpiredException $e) {
-            $newToken = JWTAuth::refresh($currentToken);
+        Log::warning('⛔ [JWT-REFRESH] Refresh TTL expired');
 
-            \Log::info('✅ Token refreshed successfully', ['new_token' => $newToken]);
+        return response()->json([
+            'success' => false,
+            'message' => 'Refresh expired. Please login again.',
+        ], 401);
 
-            return response()->json([
+    } catch (\Exception $e) {
-                'success' => true,
+        Log::error('🔥 [JWT-REFRESH] Exception', [
-                'token' => $newToken,
+            'error' => $e->getMessage(),
-            ]);
+        ]);
 
-        } catch (\Tymon\JWTAuth\Exceptions\TokenExpiredException $e) {
+        return response()->json([
-            \Log::error('❌ TokenExpiredException in refreshToken()', [
+            'success' => false,
-                'message' => $e->getMessage(),
+            'message' => 'Unable to refresh token.',
-            ]);
+        ], 401);
-            return response()->json([
-                'success' => false,
-                'message' => 'Token expired, cannot refresh.',
-            ], 401);
-
-        } catch (\Tymon\JWTAuth\Exceptions\TokenInvalidException $e) {
-            \Log::error('❌ TokenInvalidException in refreshToken()', [
-                'message' => $e->getMessage(),
-            ]);
-            return response()->json([
-                'success' => false,
-                'message' => 'Invalid token.',
-            ], 401);
-
-        } catch (\Tymon\JWTAuth\Exceptions\JWTException $e) {
-            \Log::error('❌ JWTException in refreshToken()', [
-                'message' => $e->getMessage(),
-            ]);
-            return response()->json([
-                'success' => false,
-                'message' => 'Could not refresh token.',
-            ], 401);
-
-        } catch (\Exception $e) {
-            \Log::error('❌ General Exception in refreshToken()', [
-                'message' => $e->getMessage(),
-                'trace' => $e->getTraceAsString(),
-            ]);
-            return response()->json([
-                'success' => false,
-                'message' => 'Unexpected error while refreshing token.',
-            ], 500);
-        }
     }
+}
+
+
+
+
 
     /**
      * User Login

config/jwt.php

@@ -89,7 +89,7 @@ return [
     |
     */
 
-    'ttl' => (int) env('JWT_TTL', 86400),
+    'ttl' => (int) env('JWT_TTL', 15),
 
     /*
     |--------------------------------------------------------------------------
@@ -108,7 +108,7 @@ return [
     |
     */
 
-    'refresh_ttl' => (int) env('JWT_REFRESH_TTL', 129600),
+    'refresh_ttl' => (int) env('JWT_REFRESH_TTL', 60),
 
     /*
     |--------------------------------------------------------------------------

routes/api.php

@@ -19,8 +19,11 @@ Route::post('/signup-request', [RequestController::class, 'usersignup']);
 //login / logout
 Route::post('/user/login', [UserAuthController::class, 'login']);
 
+
+Route::post('/auth/refresh', [UserAuthController::class, 'refreshToken']);
+
+
 Route::middleware(['auth:api'])->group(function () {
-    //Route::post('/user/refresh', [UserAuthController::class, 'refreshToken']);
 
     Route::post('/user/logout', [UserAuthController::class, 'logout']);
 

routes/web.php

@@ -35,6 +35,10 @@ Route::prefix('admin')->middleware('web')->group(function () {
     
 
 });
+Route::get('/login', function () {
+    return redirect()->route('admin.login');
+})->name('login');
+