From 4a19830f6ca346cf048bf71cc48b7ada5e724399 Mon Sep 17 00:00:00 2001
From: Ste Vaidis <ste.vaidis@gmail.com>
Date: Sun, 15 Dec 2024 19:32:05 +0200
Subject: [PATCH] Update OAuth2-Front-Approach.md

---
 OAuth2-Front-Approach.md | 43 +++++++++++++++++++++++++++++++++++++---
 1 file changed, 40 insertions(+), 3 deletions(-)

diff --git a/OAuth2-Front-Approach.md b/OAuth2-Front-Approach.md
index ba0a891..8ae234b 100644
--- a/OAuth2-Front-Approach.md
+++ b/OAuth2-Front-Approach.md
@@ -403,16 +403,20 @@ const fetchUserData = async (accessToken) => {
 <br><br><br>
 
 
+
+
+
+
 # 5. Refresh the Token
 
 ### Frontend ⇢ Backend ⇢ Google ⇢ Backend ⇢ Frontend
 
 <br>
 
-If the access token is expired, the frontend will receive an error response from Google when attempting to fetch user data
+If the access token is expired, the frontend will receive a response error from Google when attempting to fetch user data
 
 <details>
-<summary><h4>HTTP GET Request from Frontend to Google</h4></summary>
+<summary><h4>HTTP GET Request from Frontend to Google (with expires token)</h4></summary>
 
 ```bash
 GET https://www.googleapis.com/oauth2/v3/userinfo
@@ -435,14 +439,47 @@ Authorization: Bearer ACCESSTOKEN6zXZkHi2XITkDoOVACCESSTOKEN
 
 
 <details>
-<summary><h4>HTTP POST Refresh token from Frontend to Backend</h4></summary>
+<summary><h4>HTTP POST Request from Frontend to Backend (with refresh token)</h4></summary>
 
 ```bash
+POST /api/refresh-token HTTP/1.1
+Host: your-backend-domain.com
+Content-Type: application/json
+Authorization: Bearer <access_token> (optional, depends on the backend)
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
+Accept: application/json
+Origin: https://your-frontend-domain.com
+Connection: keep-alive
+Content-Length: 57
 
+{
+  "refresh_token": "REFRESHTOKEN6zXZkHi2XITkDoOVREFRESHTOKEN"
+}
 ```
 
 </details>
 
+
+<details>
+<summary><h4>HTTP POST Response from Backend to Frontend (with new access token)</h4></summary>
+
+```json
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 123
+Cache-Control: no-store
+Pragma: no-cache
+
+{
+  "access_token": "new-access-token-here",
+  "expires_in": 3600,
+  "token_type": "bearer"
+}
+```
+
+</details>
+
+
 <details>
 <summary><h4>Frontend Code</h4></summary>