Auto-refresh JWT tutorial

[Sytten]

Summary of the gap

Helping a user understand how to use the convert workflow and environment variables to setup an auto-refresh JWT for replay.

What is the goal of this content?

Learning: A step-by-step tutorial for beginners.

Success Criteria

A user should be able to create their own workflow to refresh their JWT (usually probably a fetch in the JS node), store the result in the environment and inject in a placeholder of replay.

Technical Details / Proposed Content

import { Request as FetchRequest, fetch } from "caido:http";

export function run({ data }, sdk) {
   let jwt = sdk.env.getVar("MY_SECRET");
   const valid = false; // Check if still valid
   if (!valid) {
     // Refresh logic
     const fetchRequest = new FetchRequest("https://google.com");
     const resp = await fetch(fetchRequest);
     const body = await resp.json();
     await sdk.env.setVar("MY_SECRET", body.access_token);
     jwt = body.access_token;
   }
   return jwt;
}

See Also

No response

[ninjeeter]

@Sytten We already have a tutorial that covers this: https://docs.caido.io/app/tutorials/refresh_authentication.html#session-tokens

[Sytten]

Similar but not the same, I got asked by two customers for that so I need it :)
This is only one convert workflow