logout works

server/src/auth/auth.service.ts

@@ -77,6 +77,15 @@ export class AuthService {
       }
     }
 
+    const jwtSecret = this.configService.get<string>('JWT_SECRET');
+    const jwtexpirationtime = this.configService.get<string>(
+      'JWT_EXPIRATION_TIME',
+    );
+
+    console.info(
+      'creating. jwt secret is: ' + jwtSecret + ',' + jwtexpirationtime,
+    );
+
     // let accessToken: string, refreshToken: string;
     const [accessToken, refreshToken] = await Promise.all([
       this.jwtService.signAsync(
@@ -87,7 +96,7 @@ export class AuthService {
         },
         {
           secret: this.configService.get<string>('JWT_SECRET'),
-          expiresIn: this.configService.get<StringValue>('JWT_EXPIRATION_TIME'),
+          expiresIn: +this.configService.get<StringValue>('JWT_EXPIRATION_TIME')!,
         },
       ),
       this.jwtService.signAsync(

server/src/auth/jwt.strategy.ts

@@ -3,6 +3,7 @@ import { PassportStrategy } from '@nestjs/passport';
 import { ExtractJwt, Strategy } from 'passport-jwt';
 import { ConfigService } from '@nestjs/config';
 import { Role } from './role.enum';
+import { Request } from 'express';
 
 @Injectable()
 export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
@@ -10,9 +11,18 @@ export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
     super({
       jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
       ignoreExpiration: false,
-      // This is the critical fix: ensure the strategy uses the ConfigService
-      // to get the secret at runtime.
-      secretOrKey: configService.get<string>('JWT_SECRET') as string,
+      // DO NOT use secretOrKey here. It causes a race condition with ConfigService.
+      // Instead, use secretOrKeyProvider to look up the secret dynamically
+      // at request time, ensuring ConfigService is ready.
+      secretOrKeyProvider: (
+        request: Request,
+        rawJwtToken: any,
+        done: (err: any, secretOrKey?: string | Buffer) => void,
+      ) => {
+        const secretKey = this.configService.get<string>('JWT_SECRET');
+        console.info('secretKey', secretKey);
+        done(null, secretKey);
+      },
     });
   }
 

server/src/entity/user.ts

@@ -25,6 +25,6 @@ export class User {
   @JoinTable()
   groups: UserGroup[];
 
-  @Column({ nullable: true })
-  hashedRefreshToken?: string;
+  @Column({ type: 'varchar', nullable: true })
+  hashedRefreshToken: string | null;
 }

server/src/user/user.service.ts

@@ -67,7 +67,7 @@ export class UserService {
       const hashedRefreshToken = await bcrypt.hash(refreshToken, 10);
       await this.usersRepository.update(id, { hashedRefreshToken });
     } else {
-      await this.usersRepository.update(id, { hashedRefreshToken: undefined });
+      await this.usersRepository.update(id, { hashedRefreshToken: null });
     }
   }
 }