From 347950adbf16eb985d6877c89830face8fb51b81 Mon Sep 17 00:00:00 2001
From: Hyo <dooboolab@gmail.com>
Date: Sun, 26 Dec 2021 02:03:36 +0900
Subject: [PATCH] Add refresh token senario on auth (#516)

* Add datatype to schema

* Add refresh token senario on auth

* Add [ErrorBoundary] and `getIdToken` in `fetchGraphql`

* Impl `getIdToken` api
---
 client/assets/langs/en.json                   |   1 +
 client/assets/langs/ko.json                   |   1 +
 client/package.json                           |   1 +
 client/src/App.tsx                            |   7 +
 client/src/apis/auth.ts                       |  45 +++++
 client/src/apis/sample.ts                     |   4 +-
 .../MainStackNavigator/LeaveChannelModal.tsx  |   4 +-
 client/src/relay/fetch.ts                     |   6 +-
 client/src/utils/error.tsx                    |  58 ++++++
 client/yarn.lock                              |   5 +
 .../migration.sql                             | 167 ++++++++++++++++++
 server/prisma/schema.prisma                   |  41 ++---
 server/src/apis/root.ts                       |  39 +++-
 server/src/resolvers/User/mutation.ts         |  24 +--
 server/src/services/UserService.ts            |   6 +-
 server/src/utils/const.ts                     |   2 +
 server/src/utils/jwt.ts                       | 139 +++++++++++++++
 17 files changed, 508 insertions(+), 42 deletions(-)
 create mode 100644 client/src/apis/auth.ts
 create mode 100644 client/src/utils/error.tsx
 create mode 100644 server/prisma/migrations/20211218094713_datatype_refresh_token/migration.sql
 create mode 100644 server/src/utils/jwt.ts

diff --git a/client/assets/langs/en.json b/client/assets/langs/en.json
index 65cfe8988..d06cbb565 100644
--- a/client/assets/langs/en.json
+++ b/client/assets/langs/en.json
@@ -109,6 +109,7 @@
   "TAKE_A_PICTURE": "Take a picture",
   "TERMS_FOR_AGREEMENT": "Terms for agreement",
   "THUMBNAIL_ERROR": "No Video Preview",
+  "RELOAD": "Reload",
   "TRY_AGAIN": "Try again",
   "UNBAN_USER": "Unban User",
   "UNBAN_USER_TEXT": "Do you wan to unban current user? If then, you will start to see and receive messages from the user.",
diff --git a/client/assets/langs/ko.json b/client/assets/langs/ko.json
index aeee4576c..c011903c3 100644
--- a/client/assets/langs/ko.json
+++ b/client/assets/langs/ko.json
@@ -109,6 +109,7 @@
   "TAKE_A_PICTURE": "촬영하기",
   "TERMS_FOR_AGREEMENT": "이용약관",
   "THUMBNAIL_ERROR": "미리보기 실패",
+  "RELOAD": "새로고침",
   "TRY_AGAIN": "다시 시도",
   "UNBAN_USER": "차단 해제",
   "UNBAN_USER_TEXT": "선택한 유저의 차단을 해지하시겠습니까? 앞으로 해당 유저의 모든 메시지를 보거나 받을 수 있습니다.",
diff --git a/client/package.json b/client/package.json
index 427425e67..f4bd36964 100644
--- a/client/package.json
+++ b/client/package.json
@@ -76,6 +76,7 @@
     "react": "17.0.2",
     "react-native": "0.64.3",
     "react-native-appearance": "~0.3.4",
+    "react-native-error-boundary": "^1.1.12",
     "react-native-gesture-handler": "~1.10.2",
     "react-native-get-random-values": "~1.7.1",
     "react-native-modalbox": "^2.0.2",
diff --git a/client/src/App.tsx b/client/src/App.tsx
index b0a078d11..4cf408669 100644
--- a/client/src/App.tsx
+++ b/client/src/App.tsx
@@ -1,6 +1,7 @@
 import * as Notifications from 'expo-notifications';
 import * as SplashScreen from 'expo-splash-screen';
 
+import FallbackComponent, {handleError} from './utils/error';
 import React, {FC, ReactElement, ReactNode, useEffect} from 'react';
 import {dark, light} from './theme';
 
@@ -12,6 +13,7 @@ import AsyncStorage from '@react-native-async-storage/async-storage';
 import {AuthProvider} from './providers/AuthProvider';
 import ComponentWrapper from './utils/ComponentWrapper';
 import {DeviceProvider} from './providers/DeviceProvider';
+import ErrorBoundary from 'react-native-error-boundary';
 import Icons from './utils/Icons';
 import {RelayEnvironmentProvider} from 'react-relay';
 import RootNavigator from './components/navigations/RootStackNavigator';
@@ -99,6 +101,11 @@ const WrappedApp = new ComponentWrapper(RootNavigator)
   .wrap(ActionSheetProviderWithChildren, {})
   .wrap(AuthProvider, {})
   .wrap(RelayEnvironmentProvider, {environment})
+  // @ts-ignore
+  .wrap(ErrorBoundary, {
+    onError: handleError,
+    FallbackComponent,
+  })
   .wrap(DeviceProvider, {})
   .wrap(SnackbarProvider, {})
   .wrap(HackatalkThemeProvider, {})
diff --git a/client/src/apis/auth.ts b/client/src/apis/auth.ts
new file mode 100644
index 000000000..568e0370e
--- /dev/null
+++ b/client/src/apis/auth.ts
@@ -0,0 +1,45 @@
+import * as Config from '../../config';
+
+import AsyncStorage from '@react-native-async-storage/async-storage';
+
+const {ROOT_URL} = Config;
+
+type Result = {
+  token?: string;
+  message?: string;
+};
+
+export const getIdToken = async (
+  body?: Record<string, unknown>,
+  signal?: AbortController['signal'],
+): Promise<string> => {
+  const token = (await AsyncStorage.getItem('token')) || '';
+
+  if (!token) {
+    return '';
+  }
+
+  const fetchOption = {
+    signal,
+    method: 'POST',
+    headers: {
+      Accept: 'application/json',
+      'Content-Type': 'application/json',
+      Authorization: token,
+    },
+    body: JSON.stringify(body),
+  };
+
+  try {
+    const res: Response = await fetch(`${ROOT_URL}/get_id_token`, fetchOption);
+    const json: Result = await res.json();
+
+    if (json.token && json.token !== token) {
+      await AsyncStorage.setItem('token', token);
+    }
+
+    return json.token || '';
+  } catch (err: any) {
+    throw new Error(err);
+  }
+};
diff --git a/client/src/apis/sample.ts b/client/src/apis/sample.ts
index 46f72e20d..c9d9df13c 100644
--- a/client/src/apis/sample.ts
+++ b/client/src/apis/sample.ts
@@ -9,10 +9,10 @@ export const sample = async (
   const fetchOption = {
     // signal,
     method: 'POST',
-    headers: new Headers({
+    headers: {
       Accept: 'application/json',
       'Content-Type': 'application/json',
-    }),
+    },
     body: JSON.stringify(body),
   };
 
diff --git a/client/src/components/navigations/MainStackNavigator/LeaveChannelModal.tsx b/client/src/components/navigations/MainStackNavigator/LeaveChannelModal.tsx
index 13c8a14d8..1183e2d33 100644
--- a/client/src/components/navigations/MainStackNavigator/LeaveChannelModal.tsx
+++ b/client/src/components/navigations/MainStackNavigator/LeaveChannelModal.tsx
@@ -87,9 +87,7 @@ const ChannelModalContent: FC<ModalContentProps> = ({
     const {channelId} = leaveChannelModalState;
 
     const mutationConfig = {
-      variables: {
-        channelId,
-      },
+      variables: {channelId},
       updater: (store: RecordSourceSelectorProxy<{}>) => {
         deleteChannelAndUpdate(store, channelId);
       },
diff --git a/client/src/relay/fetch.ts b/client/src/relay/fetch.ts
index 1aab7bc6a..e85567357 100644
--- a/client/src/relay/fetch.ts
+++ b/client/src/relay/fetch.ts
@@ -1,7 +1,7 @@
 import * as Config from '../../config';
 
-import AsyncStorage from '@react-native-async-storage/async-storage';
 import {FetchFunction} from 'relay-runtime';
+import {getIdToken} from '../apis/auth';
 
 const {GRAPHQL_URL} = Config;
 
@@ -17,10 +17,12 @@ const fetchGraphQL: FetchFunction = async (
   cacheConfig,
   uploadables,
 ) => {
+  const token = await getIdToken();
+
   const config: RequestProps = {
     method: 'POST',
     headers: {
-      Authorization: (await AsyncStorage.getItem('token')) || '',
+      Authorization: token,
       Accept: 'application/json',
     },
     body: '',
diff --git a/client/src/utils/error.tsx b/client/src/utils/error.tsx
new file mode 100644
index 000000000..8806b28de
--- /dev/null
+++ b/client/src/utils/error.tsx
@@ -0,0 +1,58 @@
+import {Button, Typography} from 'dooboo-ui';
+import {DevSettings, View} from 'react-native';
+import React, {ReactElement, useEffect} from 'react';
+
+import AsyncStorage from '@react-native-async-storage/async-storage';
+import {getString} from '../../STRINGS';
+import styled from '@emotion/native';
+
+const Container = styled.SafeAreaView`
+  margin: 0 24px;
+
+  flex: 1;
+  justify-content: center;
+`;
+
+export const handleError = (error: any, stack?: string): void => {
+  if (__DEV__) {
+    // eslint-disable-next-line no-console
+    console.error(stack, error);
+  }
+};
+
+interface Props {
+  error: Error;
+  resetError: Function;
+}
+
+export default function FallbackComponent({resetError}: Props): ReactElement {
+  useEffect(() => {
+    AsyncStorage.removeItem('token');
+    AsyncStorage.removeItem('push_token');
+
+    resetError();
+  }, [resetError]);
+
+  return (
+    <Container>
+      <>
+        <Typography.Heading1>{getString('ERROR_OCCURED')}</Typography.Heading1>
+      </>
+      <View style={{height: 32}} />
+      <Button
+        size="large"
+        onPress={() => resetError()}
+        text={getString('TRY_AGAIN')}
+      />
+      <View style={{height: 12}} />
+      {__DEV__ ? (
+        <Button
+          style={{marginBottom: 32}}
+          size="large"
+          onPress={() => DevSettings.reload()}
+          text={getString('RELOAD')}
+        />
+      ) : null}
+    </Container>
+  );
+}
diff --git a/client/yarn.lock b/client/yarn.lock
index ac75413eb..d019ea2d6 100644
--- a/client/yarn.lock
+++ b/client/yarn.lock
@@ -13034,6 +13034,11 @@ react-native-codegen@^0.0.6:
     jscodeshift "^0.11.0"
     nullthrows "^1.1.1"
 
+react-native-error-boundary@^1.1.12:
+  version "1.1.12"
+  resolved "https://registry.yarnpkg.com/react-native-error-boundary/-/react-native-error-boundary-1.1.12.tgz#80773d8f52bf7354f9776b022a57081a7ecafb8c"
+  integrity sha512-YVM7DOY6TbCrtYc87CqABGntnxQRMWSkzcF6+tB9QBUs4sWOWIfeeN4yJGF2eYJAGVnaym5ys9GqcYDu8mjE2g==
+
 react-native-gesture-handler@~1.10.2:
   version "1.10.3"
   resolved "https://registry.yarnpkg.com/react-native-gesture-handler/-/react-native-gesture-handler-1.10.3.tgz#942bbf2963bbf49fa79593600ee9d7b5dab3cfc0"
diff --git a/server/prisma/migrations/20211218094713_datatype_refresh_token/migration.sql b/server/prisma/migrations/20211218094713_datatype_refresh_token/migration.sql
new file mode 100644
index 000000000..2f57d1e46
--- /dev/null
+++ b/server/prisma/migrations/20211218094713_datatype_refresh_token/migration.sql
@@ -0,0 +1,167 @@
+/*
+  Warnings:
+
+  - You are about to alter the column `name` on the `Channel` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(255)`.
+  - You are about to alter the column `lastMessageId` on the `Channel` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(255)`.
+  - You are about to alter the column `token` on the `Notification` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(1024)`.
+  - You are about to alter the column `device` on the `Notification` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(255)`.
+  - You are about to alter the column `os` on the `Notification` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(255)`.
+  - You are about to alter the column `userId` on the `Notification` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(255)`.
+  - You are about to alter the column `socialId` on the `Profile` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(255)`.
+  - You are about to alter the column `value` on the `Reaction` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(4)`.
+  - You are about to alter the column `userId` on the `Reaction` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(255)`.
+  - You are about to alter the column `messageId` on the `Reaction` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(255)`.
+  - You are about to alter the column `senderId` on the `Reply` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(255)`.
+  - You are about to alter the column `messageId` on the `Reply` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(255)`.
+  - You are about to alter the column `password` on the `User` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(255)`.
+  - You are about to alter the column `name` on the `User` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(255)`.
+  - You are about to alter the column `nickname` on the `User` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(255)`.
+  - You are about to alter the column `thumbURL` on the `User` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(1024)`.
+  - You are about to alter the column `photoURL` on the `User` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(1024)`.
+  - You are about to alter the column `phone` on the `User` table. The data in that column could be lost. The data in that column will be cast from `Text` to `VarChar(255)`.
+
+*/
+-- DropForeignKey
+ALTER TABLE "BlockedUser" DROP CONSTRAINT "BlockedUser_blockedUserId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "BlockedUser" DROP CONSTRAINT "BlockedUser_userId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "Friend" DROP CONSTRAINT "Friend_friendId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "Friend" DROP CONSTRAINT "Friend_userId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "Membership" DROP CONSTRAINT "Membership_channelId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "Membership" DROP CONSTRAINT "Membership_userId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "Message" DROP CONSTRAINT "Message_channelId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "Message" DROP CONSTRAINT "Message_senderId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "Notification" DROP CONSTRAINT "Notification_userId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "Profile" DROP CONSTRAINT "Profile_userId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "Reaction" DROP CONSTRAINT "Reaction_messageId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "Reaction" DROP CONSTRAINT "Reaction_replyId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "Reaction" DROP CONSTRAINT "Reaction_userId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "Reply" DROP CONSTRAINT "Reply_messageId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "Reply" DROP CONSTRAINT "Reply_senderId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "Report" DROP CONSTRAINT "Report_reportedUserId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "Report" DROP CONSTRAINT "Report_userId_fkey";
+
+-- AlterTable
+ALTER TABLE "Channel" ALTER COLUMN "name" SET DATA TYPE VARCHAR(255),
+ALTER COLUMN "lastMessageId" SET DATA TYPE VARCHAR(255);
+
+-- AlterTable
+ALTER TABLE "Notification" ALTER COLUMN "token" SET DATA TYPE VARCHAR(1024),
+ALTER COLUMN "device" SET DATA TYPE VARCHAR(255),
+ALTER COLUMN "os" SET DATA TYPE VARCHAR(255),
+ALTER COLUMN "userId" SET DATA TYPE VARCHAR(255);
+
+-- AlterTable
+ALTER TABLE "Profile" ADD COLUMN     "refreshToken" VARCHAR(1024),
+ALTER COLUMN "socialId" SET DATA TYPE VARCHAR(255);
+
+-- AlterTable
+ALTER TABLE "Reaction" ALTER COLUMN "value" SET DATA TYPE VARCHAR(4),
+ALTER COLUMN "userId" SET DATA TYPE VARCHAR(255),
+ALTER COLUMN "messageId" SET DATA TYPE VARCHAR(255);
+
+-- AlterTable
+ALTER TABLE "Reply" ALTER COLUMN "senderId" SET DATA TYPE VARCHAR(255),
+ALTER COLUMN "messageId" SET DATA TYPE VARCHAR(255);
+
+-- AlterTable
+ALTER TABLE "User" ALTER COLUMN "password" SET DATA TYPE VARCHAR(255),
+ALTER COLUMN "name" SET DATA TYPE VARCHAR(255),
+ALTER COLUMN "nickname" SET DATA TYPE VARCHAR(255),
+ALTER COLUMN "thumbURL" SET DATA TYPE VARCHAR(1024),
+ALTER COLUMN "photoURL" SET DATA TYPE VARCHAR(1024),
+ALTER COLUMN "phone" SET DATA TYPE VARCHAR(255);
+
+-- AddForeignKey
+ALTER TABLE "Notification" ADD CONSTRAINT "Notification_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Profile" ADD CONSTRAINT "Profile_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Friend" ADD CONSTRAINT "Friend_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Friend" ADD CONSTRAINT "Friend_friendId_fkey" FOREIGN KEY ("friendId") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "BlockedUser" ADD CONSTRAINT "BlockedUser_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "BlockedUser" ADD CONSTRAINT "BlockedUser_blockedUserId_fkey" FOREIGN KEY ("blockedUserId") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Report" ADD CONSTRAINT "Report_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Report" ADD CONSTRAINT "Report_reportedUserId_fkey" FOREIGN KEY ("reportedUserId") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Membership" ADD CONSTRAINT "Membership_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Membership" ADD CONSTRAINT "Membership_channelId_fkey" FOREIGN KEY ("channelId") REFERENCES "Channel"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Message" ADD CONSTRAINT "Message_channelId_fkey" FOREIGN KEY ("channelId") REFERENCES "Channel"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Message" ADD CONSTRAINT "Message_senderId_fkey" FOREIGN KEY ("senderId") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Reply" ADD CONSTRAINT "Reply_senderId_fkey" FOREIGN KEY ("senderId") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Reply" ADD CONSTRAINT "Reply_messageId_fkey" FOREIGN KEY ("messageId") REFERENCES "Message"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Reaction" ADD CONSTRAINT "Reaction_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Reaction" ADD CONSTRAINT "Reaction_messageId_fkey" FOREIGN KEY ("messageId") REFERENCES "Message"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Reaction" ADD CONSTRAINT "Reaction_replyId_fkey" FOREIGN KEY ("replyId") REFERENCES "Reply"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- RenameIndex
+ALTER INDEX "Membership.updatedAt_index" RENAME TO "Membership_updatedAt_idx";
+
+-- RenameIndex
+ALTER INDEX "Notification.token_unique" RENAME TO "Notification_token_key";
+
+-- RenameIndex
+ALTER INDEX "Profile.userId_unique" RENAME TO "Profile_userId_key";
+
+-- RenameIndex
+ALTER INDEX "User.email_unique" RENAME TO "User_email_key";
diff --git a/server/prisma/schema.prisma b/server/prisma/schema.prisma
index 8b7699569..18c3f33a4 100644
--- a/server/prisma/schema.prisma
+++ b/server/prisma/schema.prisma
@@ -22,14 +22,14 @@ enum AuthType {
 model User {
   id            String    @id @default(cuid())
   email         String?   @unique
-  password      String?
-  name          String?
-  nickname      String?
-  thumbURL      String?
-  photoURL      String?
+  password      String?   @db.VarChar(255)
+  name          String?   @db.VarChar(255)
+  nickname      String?   @db.VarChar(255)
+  thumbURL      String?   @db.VarChar(1024)
+  photoURL      String?   @db.VarChar(1024)
   birthday      DateTime?
   gender        Gender?
-  phone         String?
+  phone         String?   @db.VarChar(255)
   statusMessage String?
   verified      Boolean?  @default(false)
   lastSignedIn  DateTime?
@@ -54,18 +54,19 @@ model User {
 
 model Notification {
   id        Int       @id @default(autoincrement())
-  token     String    @unique
-  device    String?
-  os        String?
-  userId    String
+  token     String    @unique @db.VarChar(1024)
+  device    String?   @db.VarChar(255)
+  os        String?   @db.VarChar(255)
+  userId    String    @db.VarChar(255)
   user      User      @relation(fields: [userId], references: [id])
   createdAt DateTime? @default(now())
 }
 
 model Profile {
-  id       Int       @id @default(autoincrement())
-  socialId String?
-  authType AuthType?
+  id           Int       @id @default(autoincrement())
+  socialId     String?   @db.VarChar(255)
+  authType     AuthType?
+  refreshToken String?   @db.VarChar(1024)
 
   userId String @unique
   User   User   @relation(fields: [userId], references: [id])
@@ -147,10 +148,10 @@ enum ChannelType {
 model Channel {
   id            String       @id @default(cuid())
   channelType   ChannelType
-  name          String?
+  name          String?      @db.VarChar(255)
   messages      Message[]    @relation("Message")
   membership    Membership[]
-  lastMessageId String?
+  lastMessageId String?      @db.VarChar(255)
   createdAt     DateTime?    @default(now())
   updatedAt     DateTime?    @default(now()) @updatedAt
   deletedAt     DateTime?
@@ -192,18 +193,18 @@ model Reply {
   updatedAt   DateTime?   @default(now()) @updatedAt
   deletedAt   DateTime?
 
-  senderId  String
+  senderId  String  @db.VarChar(255)
   sender    User    @relation(fields: [senderId], references: [id])
-  messageId String
+  messageId String  @db.VarChar(255)
   message   Message @relation(fields: [messageId], references: [id])
 }
 
 model Reaction {
   id        Int     @id @default(autoincrement())
-  value     String
-  userId    String
+  value     String  @db.VarChar(4)
+  userId    String  @db.VarChar(255)
   user      User    @relation(fields: [userId], references: [id])
-  messageId String
+  messageId String  @db.VarChar(255)
   message   Message @relation(fields: [messageId], references: [id])
   replyId   Int
   reply     Reply   @relation(fields: [replyId], references: [id])
diff --git a/server/src/apis/root.ts b/server/src/apis/root.ts
index a5fa6eadc..e9b3dd5cb 100644
--- a/server/src/apis/root.ts
+++ b/server/src/apis/root.ts
@@ -10,6 +10,7 @@ import qs from 'querystring';
 import stream from 'stream';
 import {uploadFileToAzureBlobFromStream} from '../utils/azure';
 import {verify} from 'jsonwebtoken';
+import {verifyWithRefresh} from '../utils/jwt';
 
 interface VerificationToken {
   email: string;
@@ -99,10 +100,45 @@ const onVerifyEmail = async (req: Request, res: Response): Promise<void> => {
   }
 };
 
+const getIdToken = async (req: Request, res: Response): Promise<void> => {
+  const token = getToken(req);
+
+  if (!token) {
+    res.status(401);
+
+    res.json({
+      message: 'User has not signed in.',
+    });
+
+    return;
+  }
+
+  try {
+    const result = await verifyWithRefresh(token, prisma);
+
+    if (result.accessToken) {
+      res.status(200).json({
+        token: result.accessToken,
+      });
+
+      return;
+    }
+
+    res.status(200).json({
+      token,
+      message: 'User is verified',
+    });
+  } catch (err) {
+    res.status(200).json({
+      message: err,
+    });
+  }
+};
+
 const onUploadSingle = async (req: Request, res: Response): Promise<void> => {
   const token = getToken(req);
 
-  if (token === null) {
+  if (!token) {
     res.status(401);
 
     res.json({
@@ -146,6 +182,7 @@ const errorRequestHandler: ErrorRequestHandler = (err, _req, res, _next) => {
 router
   .get('/reset_password/:token/:password', onResetPassword)
   .get('/verify_email/:token', onVerifyEmail)
+  .post('/get_id_token', getIdToken)
   .post(
     '/upload_single',
     upload.single('inputFile'),
diff --git a/server/src/resolvers/User/mutation.ts b/server/src/resolvers/User/mutation.ts
index 40a955011..01d71e177 100644
--- a/server/src/resolvers/User/mutation.ts
+++ b/server/src/resolvers/User/mutation.ts
@@ -1,13 +1,3 @@
-import {
-  APP_SECRET,
-  encryptCredential,
-  getEmailVerificationHTML,
-  getPasswordResetHTML,
-  validateCredential,
-  validateEmail,
-  verifyFacebookId,
-  verifyGoogleId,
-} from '../../utils/auth';
 import {
   ErrorEmailNotValid,
   ErrorEmailSentFailed,
@@ -19,6 +9,15 @@ import SendGridMail, {MailDataRequired} from '@sendgrid/mail';
 import {USER_SIGNED_IN, USER_UPDATED} from './subscription';
 import {andThen, pipe} from 'ramda';
 import {arg, inputObjectType, mutationField, nonNull, stringArg} from 'nexus';
+import {
+  encryptCredential,
+  getEmailVerificationHTML,
+  getPasswordResetHTML,
+  validateCredential,
+  validateEmail,
+  verifyFacebookId,
+  verifyGoogleId,
+} from '../../utils/auth';
 
 import {AuthType} from '../../models/Scalar';
 import {Upload} from '../../models';
@@ -27,6 +26,7 @@ import {UserService} from '../../services/UserService';
 import {assert} from '../../utils/assert';
 import generator from 'generate-password';
 import {getMimeType} from 'stream-mime-type';
+import {sign as jwtSignIn} from '../../utils/jwt';
 import {nanoid} from 'nanoid';
 import {sign} from 'jsonwebtoken';
 import {uploadFileToAzureBlobFromStream} from '../../utils/azure';
@@ -153,8 +153,8 @@ export const signInEmail = mutationField('signInEmail', {
           },
           andThen(() => pubsub.publish(USER_SIGNED_IN, user)),
           andThen(updateLastSignedIn),
-          andThen(() => ({
-            token: sign({userId: user.id}, APP_SECRET),
+          andThen(async () => ({
+            token: await jwtSignIn(user.id, prisma, true),
             user,
           })),
         )(),
diff --git a/server/src/services/UserService.ts b/server/src/services/UserService.ts
index de233b44c..a3237f911 100644
--- a/server/src/services/UserService.ts
+++ b/server/src/services/UserService.ts
@@ -4,7 +4,7 @@ import {ErrorEmailForUserExists, ErrorString} from '../utils/error';
 import type {Context} from '../context';
 import {NexusGenRootTypes} from '../generated/nexus';
 import {USER_SIGNED_IN} from '../resolvers';
-import {sign} from 'jsonwebtoken';
+import {sign as jwtSignIn} from '../utils/jwt';
 
 export interface SocialUserInput {
   socialId: string;
@@ -41,8 +41,10 @@ export class UserService {
       data: {lastSignedIn: new Date().toISOString()},
     });
 
+    const token = await jwtSignIn(user.id, ctx.prisma, true);
+
     return {
-      token: sign({userId: user.id}, ctx.appSecret),
+      token,
       user,
     };
   }
diff --git a/server/src/utils/const.ts b/server/src/utils/const.ts
index 856f47f64..8f88e093a 100644
--- a/server/src/utils/const.ts
+++ b/server/src/utils/const.ts
@@ -1 +1,3 @@
 export const UPLOAD_FILE_SIZE_LIMIT = 100000000;
+export const REFRESH_TIME = '30d';
+export const ACCESS_TIME = '1h';
diff --git a/server/src/utils/jwt.ts b/server/src/utils/jwt.ts
new file mode 100644
index 000000000..50a0ef0a4
--- /dev/null
+++ b/server/src/utils/jwt.ts
@@ -0,0 +1,139 @@
+import {ACCESS_TIME, REFRESH_TIME} from './const';
+
+import {PrismaClient} from '@prisma/client';
+import jwt from 'jsonwebtoken';
+
+const {JWT_SECRET = 'undefined'} = process.env;
+
+interface Token {
+  userId: string;
+}
+
+interface VerifiedToken {
+  verified?: boolean;
+  message?: string;
+  userId: string;
+}
+
+export const sign = async (
+  userId: string,
+  prisma?: PrismaClient,
+  shouldGenerateRefreshToken?: boolean,
+): Promise<string> => {
+  const payload: Token = {
+    userId,
+  };
+
+  const accessToken = jwt.sign(payload, JWT_SECRET, {
+    expiresIn: ACCESS_TIME,
+  });
+
+  if (prisma && shouldGenerateRefreshToken) {
+    const refreshToken = jwt.sign({}, JWT_SECRET, {
+      expiresIn: REFRESH_TIME,
+    });
+
+    await prisma.user.update({
+      data: {
+        profile: {
+          upsert: {
+            create: {refreshToken},
+            update: {refreshToken},
+          },
+        },
+      },
+      where: {id: userId},
+    });
+  }
+
+  return accessToken;
+};
+
+export const verify = (token: string): VerifiedToken => {
+  let decoded: Token;
+
+  try {
+    decoded = jwt.verify(token, JWT_SECRET) as Token;
+
+    return {
+      verified: true,
+      userId: decoded.userId,
+    };
+  } catch (err: any) {
+    return {
+      verified: false,
+      message: err.message,
+      userId: '',
+    };
+  }
+};
+
+export const getRefreshToken = async (
+  userId: string,
+  prisma: PrismaClient,
+): Promise<string | null | undefined> => {
+  const data = await prisma.profile.findUnique({
+    select: {refreshToken: true},
+    where: {userId},
+  });
+
+  const refreshToken = data?.refreshToken;
+
+  if (!refreshToken) {
+    return null;
+  }
+
+  const result = verify(refreshToken);
+
+  return !result.verified ? null : refreshToken;
+};
+
+export const refresh = async (
+  userId: string,
+  prisma: PrismaClient,
+): Promise<string | null | undefined> => {
+  const newToken = jwt.sign({}, JWT_SECRET, {
+    expiresIn: REFRESH_TIME,
+  });
+
+  await prisma.profile.update({
+    data: {refreshToken: newToken},
+    where: {userId},
+  });
+
+  return newToken;
+};
+
+type VerifyRefreshResult = {
+  result: boolean;
+  accessToken?: string;
+};
+
+export const verifyWithRefresh = async (
+  accessToken: string,
+  prisma: PrismaClient,
+): Promise<VerifyRefreshResult> => {
+  try {
+    const accessResult = verify(accessToken);
+    const accessDecoded = jwt.decode(accessToken) as VerifiedToken;
+    const refreshToken = await getRefreshToken(accessDecoded.userId, prisma);
+
+    if (accessResult.verified) {
+      if (!refreshToken) {
+        refresh(accessDecoded.userId, prisma);
+      }
+
+      return {result: true, accessToken};
+    }
+
+    if (!refreshToken) {
+      return {result: false, accessToken: ''};
+    }
+
+    const newAccessToken = await sign(accessDecoded.userId);
+
+    return {result: true, accessToken: newAccessToken};
+  } catch (err: any) {
+    return {result: false, accessToken: ''};
+  }
+};