fix: refresh appxAuthToken on every login to prevent stale tokens

Previously, returning users with an existing appxAuthToken in the DB
would skip the Appx API call, causing stale tokens that result in
"new type of video player, please relogin" errors. Now the token is
always refreshed from the Appx API on login.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: hkirat

src/lib/auth.ts

@@ -147,20 +147,38 @@ export const authOptions = {
           if (
             userDb &&
             userDb.password &&
-            (await bcrypt.compare(credentials.password, userDb.password)) &&
-            userDb?.appxAuthToken
+            (await bcrypt.compare(credentials.password, userDb.password))
           ) {
             const jwt = await generateJWT({
               id: userDb.id,
             });
-            await db.user.update({
-              where: {
-                id: userDb.id,
-              },
-              data: {
-                token: jwt,
-              },
-            });
+
+            // Always refresh appxAuthToken from Appx API on login
+            try {
+              const freshUser: AppxSigninResponse = await validateUser(
+                credentials.username,
+                credentials.password,
+              );
+              await db.user.update({
+                where: {
+                  id: userDb.id,
+                },
+                data: {
+                  token: jwt,
+                  appxAuthToken: freshUser.data?.token ?? userDb.appxAuthToken,
+                },
+              });
+            } catch (e) {
+              console.log('Failed to refresh appxAuthToken:', e);
+              await db.user.update({
+                where: {
+                  id: userDb.id,
+                },
+                data: {
+                  token: jwt,
+                },
+              });
+            }
 
             return {
               id: userDb.id,