From 254547b6bdfa46ed5d4b797fc5eba87412061683 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Fri, 7 Aug 2026 01:24:45 +0000
Subject: [PATCH] fix: V-003 security vulnerability

Automated security fix generated by OrbisAI Security
---
 api/controllers/AuthController.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/api/controllers/AuthController.js b/api/controllers/AuthController.js
index d4e40cd..99ac937 100644
--- a/api/controllers/AuthController.js
+++ b/api/controllers/AuthController.js
@@ -1,5 +1,5 @@
 const jwt = require('jsonwebtoken');
-const { v1: uuidv1 } = require('uuid');
+const { v4: uuidv4 } = require('uuid');
 
 const config = require('../../config/env');
 const User = require('../models/User');
@@ -35,7 +35,7 @@ async function generateJWT(req, res, next) {
 
     req.token = jwt.sign(jwtPayload, jwtSecret, jwtData);
     // Sets a new refresh_token every time the jwt is generated
-    await req.dbUser.update({ refresh_token: uuidv1() });
+    await req.dbUser.update({ refresh_token: uuidv4() });
 
     return next();
   } catch (e) {