Refresh user token

# Extract refresh token from response headers when logging in
curl -X POST "https://auth-service.geins.io/api/{ACCOUNT_NAME}_prod/login" \
  -H "Content-Type: application/json" \
  -D headers.txt \
  -d '{
    "username": "{USER_EMAIL}",
    "password": "{USER_PASSWORD}",
    "signature": { ... }
  }'

# Extract the refresh token from headers
grep "x-auth-refresh-token" headers.txt

const loginData = await loginResponse.json();

if (loginData.token) {
  const bearerToken = loginData.token;
  
  // Extract refresh token from response headers
  const refreshToken = loginResponse.headers.get('x-auth-refresh-token');
  
}

curl -X GET "https://auth-service.geins.io/api/{ACCOUNT_NAME}_prod/login" \
  -H "Content-Type: application/json" \
  -H "x-auth-refresh-token: {REFRESH_TOKEN}" \
  -H "Cache-Control: no-cache"

// Note: This code should run on the server-side to prevent CORS issues
const authUrl = `https://auth-service.geins.io/api/{ACCOUNT_NAME}_prod/login`;

// In this example, we assume the refresh token is stored securely on the server
const storedRefreshToken = getStoredRefreshToken(); // Your secure storage method

if (!storedRefreshToken) {
  throw new Error('No refresh token available - user needs to log in');
}

const refreshResponse = await fetch(authUrl, {
  method: 'GET',
  cache: 'no-cache',
  credentials: 'include',
  headers: {
    'Content-Type': 'application/json',
    'x-auth-refresh-token': storedRefreshToken
  }
});

const refreshData = await refreshResponse.json();

if (refreshData.token) {
  const newBearerToken = refreshData.token;
  
  // Save new refresh token if provided
  const newRefreshToken = refreshResponse.headers.get('x-auth-refresh-token');
  if (newRefreshToken) {
    saveRefreshToken(newRefreshToken); // Your secure storage method
  }
}