Submitting data gotten from the getToken function to an External backend

[marveldo]

I'm new to nextjs and nextauth and I am trying to rotate my refresh tokens with next auth and django and i figured out using the jwt callback is not effective due to it not updating the session in the next request . so im using the middleware to refresh my tokens. The problem is when i try to get the access token from the Gettoken and send it to my backend i get this error from my backend code 400, message Bad request syntax ('125') it doesnt happen when i use the jwt callback but happens in middle ware how can i solve it ? Here is the code .

const secret = process.env.NEXTAUTH_SECRET
export const SESSION_SECURE = process.env.NEXTAUTH_URL?.startsWith("https://");
export const SESSION_COOKIE = SESSION_SECURE ? "__Secure-authjs.session-token": "authjs.session-token";
export const SESSION_TIMEOUT = 60
export const SIGNIN_SUB_URL = "/";


export const Shouldupdatetoken = (token : JWT ) : boolean => {
   const check_token = token.access_token as string
   const decoded_token = jwt.jwtDecode(check_token)
   const expiration_time = dayjs(decoded_token?.exp as number * 1000)

   return  dayjs().isAfter(expiration_time.subtract(5, 'minute'))
}
export function updateCookie(
   sessionToken : string | null,
   request : NextRequest,
   response : NextResponse
) : NextResponse<unknown>{

   if (sessionToken){
       request.cookies.set(SESSION_COOKIE,sessionToken)
       response = NextResponse.next({
			request: {
				headers: request.headers
			}
		});
      response.cookies.set(SESSION_COOKIE, sessionToken, {
			httpOnly: true,
			maxAge: SESSION_TIMEOUT,
			secure: SESSION_SECURE,
			sameSite: "lax"
		});
   }else{
      request.cookies.delete(SESSION_COOKIE);
		return NextResponse.redirect(new URL(SIGNIN_SUB_URL, request.url));
   }
   return response
}

export default async function  middleware(req : NextRequest){
     const token = await getToken({req, secret})
     const {pathname} = req.nextUrl
     const protectedRoutes = ['/home']
     const unprotectedRoutes = ["/login", "/signup"]
     let response = NextResponse.next()
     if (!token && protectedRoutes.some(route => pathname.startsWith(route)) ){
        return NextResponse.redirect(new URL('/login', req.url))
     }
     if (token && unprotectedRoutes.some(route => pathname.startsWith(route))){
       
        return NextResponse.redirect(new URL("/home", req.url))
     }
     if (token){
      if(Shouldupdatetoken(token as JWT )){
         try {
            const newSessionToken = await encode({
               secret: process.env.NEXTAUTH_SECRET as string,
               token: await RefreshtokenAction(token),
               maxAge: SESSION_TIMEOUT
            });
            response = updateCookie(newSessionToken, req, response);
        }catch(error){
   
        }
       
   }
     }
     
return NextResponse.next()
}

export const config = {
    matcher: [
      "/login/:path*",   
      "/signup/:path*",     
      "/home/:path*",        
     ],
  };

And this is my Refresh Action

export const RefreshtokenAction = async(token : JWT | null) => {
    if (token === null){
        return token
    }
    if(isRefreshing){
        return token
    }
  
    try{
        const json = {
            'refresh' : token.refresh_token
        }
        console.log(token.refresh_token)
        const response = await axios.post(`${process.env.BACKEND_URL}/auth/refresh/`,json)

       
        const data = response.data
        return data
    }
    catch(error : any){
        
        isRefreshing = false
        console.log(error.response.data)
        
        
    }

    return token
}

I would appreciate if someone can help me

[noobprograms]

Was it ever solved?