From e12fa0111a48b13c1b0c853eea6ddcf548e92fca Mon Sep 17 00:00:00 2001
From: Stevan Freeborn <65925598+StevanFreeborn@users.noreply.github.com>
Date: Tue, 3 Feb 2026 11:07:04 -0600
Subject: [PATCH] feat(api): refactor login logic to use domain methods and
 cookie helpers

---
 src/FiscalOS.API/Login/Endpoint.cs | 19 ++++++-------------
 1 file changed, 6 insertions(+), 13 deletions(-)

diff --git a/src/FiscalOS.API/Login/Endpoint.cs b/src/FiscalOS.API/Login/Endpoint.cs
index 211e240..aef6257 100644
--- a/src/FiscalOS.API/Login/Endpoint.cs
+++ b/src/FiscalOS.API/Login/Endpoint.cs
@@ -1,3 +1,5 @@
+using FiscalOS.API.Http;
+
 namespace FiscalOS.API.Login;
 
 internal static class Endpoint
@@ -32,22 +34,13 @@ internal static class Endpoint
     }
 
     var accessToken = tokenService.GenerateAccessToken(user);
-
     var refreshToken = tokenService.GenerateRefreshToken(user);
-    await appDbContext.RefreshTokens.AddAsync(refreshToken);
+
+    user.AddRefreshToken(refreshToken);
+
     await appDbContext.SaveChangesAsync();
 
-    httpContext.Response.Cookies.Append(
-      "fiscalos_refresh_cookie",
-      refreshToken.Token,
-      new CookieOptions
-      {
-        HttpOnly = true,
-        Expires = refreshToken.ExpiresAt,
-        SameSite = SameSiteMode.Strict,
-        Secure = true
-      }
-    );
+    httpContext.SetRefreshTokenCookie(refreshToken);
 
     return Results.Ok(Response.From(accessToken));
   }