fix: pass session token to refresh method

Author: jwilkinson87

src/main/kotlin/com/ctrlhub/core/auth/AuthRouter.kt

@@ -13,6 +13,7 @@ import io.ktor.client.call.*
 import io.ktor.client.plugins.*
 import io.ktor.client.request.delete
 import io.ktor.client.request.get
+import io.ktor.client.request.header
 import io.ktor.client.request.post
 import io.ktor.client.request.setBody
 import io.ktor.http.*
@@ -30,9 +31,13 @@ class AuthRouter(httpClient: HttpClient) : Router(httpClient = httpClient) {
         }
     }
 
-    suspend fun refresh(): AuthFlowResponse {
+    suspend fun refresh(sessionToken: String): AuthFlowResponse {
         return try {
-            httpClient.get("${Config.authBaseUrl}/self-service/login/api?refresh=true").body()
+            httpClient.get("${Config.authBaseUrl}/self-service/login/api?refresh=true") {
+                headers {
+                    header("X-Session-Token", sessionToken)
+                }
+            }.body()
         } catch (e: ClientRequestException) {
             throw ApiClientException("Failed to initiate auth", e.response, e)
         } catch (e: Exception) {

src/test/kotlin/com/ctrlhub/core/auth/AuthRouterTest.kt

@@ -105,7 +105,7 @@ class AuthRouterTest {
 
         runBlocking {
             assertFailsWith<ApiException> {
-                authRouter.refresh()
+                authRouter.refresh("sess-123")
             }
         }
     }
@@ -123,7 +123,7 @@ class AuthRouterTest {
         val authRouter = AuthRouter(httpClient = HttpClient(mockEngine).configureForTest())
 
         runBlocking {
-            val response = authRouter.refresh()
+            val response = authRouter.refresh("sess-123")
             assertEquals("test-123", response.id)
         }
     }