Perfect, thank you !

Anyone knows if its possible to use Supertokens with Azure AD? It seems it's possible to do it with ThirdParty login, but I am wondering if anyone has done it successfully before

It should be possible via custom Third party provider login. Here is something that works with active directory (if that's what you are looking for): https://github.com/supertokens/supertokens-node/blob/master/lib/ts/recipe/thirdparty/providers/activeDirectory.ts the reason it's commented out is cause it doesn't support multi tenant AD integration, but would work fine with just a single tenant. Is this what you were looking for?

Morning Is there a reason that the MySql tables config adds a

passwordless_users

table (https://supertokens.com/docs/passwordless/quick-setup/database-setup/mysql) but the PostgreSQL doesn't (https://supertokens.com/docs/passwordless/quick-setup/database-setup/postgresql)? Seems like

passwordless_users

is used by both implementations and not adding the table caused some errors in our implementation (but that could just be us)

Ah! That's a mistake in our docs. The postgresql plugin does add the table though: https://github.com/supertokens/supertokens-postgresql-plugin/blob/master/src/main/java/io/supertokens/storage/postgresql/queries/PasswordlessQueries.java#L49

We will fix the docs. Thanks

Thanks @User , much appreciated

hey!

Hi ! We do not store the supertokens userId in our DB. Is there a way "search" for the userId with some criteria like phone (which is in our users sessions) ?

for context I'm trying to use revokeAllSessionsForUser

@User You could do the following: - We have a function called

getUserByPhoneNumber

(https://supertokens.com/docs/nodejs/modules/recipe_passwordless.html#getUserByPhoneNumber). - Loop through all users using our user pagination functions and filter the ones you want to take action on. - Download the user CSV file from the dashboard and filter the ones in there to find the right user.

thx @User ! I'll try that

I'd like to enforce having one logged in user per device. To do this, on my consumeCodePOST passwordless override

override: {
          apis...
          consumeCodePOST

I was thinking of revoking all sessions for the user before creating a new one. + communicating to the user that a new login attempt happened if

revokeAllSessionsForUser

returns at least one existing handle. does it sound good to you @User ?

This would work @User . But a better flow might be to tell the user to logout of all their devices and then try to login again. This way, they are given an opportunity to decide is they want to actually login again. Plus in the way you described, the other sessions would still be active until they have to be refreshed. If however, the users logout themselves from the other devices, then you have truly enforce what you are looking for. If you would want to continue with your method, there is a race condition in which someone can consume two codes at the same time and then (with very low probability), get logged into both devices. So you also want to check the number of sessions after calling the original implementation, and if it's more than one, then perhaps revoke both. This would lead to the user getting logged out of all their devices eventually, but it's super low probability anyway.. they can login again.

> a better flow might be to tell the user to logout of all their devices and then try to login again In our case this more of a malicious abuse of our system

so usually they will not comply to that

Fair.

I could decrease the access token validity from 3600 to something like 240

there's going to be more roundtrips to the supertokens db but I guess it will be acceptable

Yea.. that's not an issue as such,

👍

I can not create an account. I have clicked on "get started" then "create an app" I see a blank page with following message: > Thank you for your interest. > Please use a desktop computer to sign up and get started.

Are you using a mobile phone? If not, what’s your desktop’s resolution?

Linux Desktop with Brave or Firefox. Resolution should be big enough...

Oh right... just a little bigger and it works. But on my laptop I split my Apps.

Ah I see.

Well.. after signing up, it’s just the core instance and its config details. So once you are setup, you will rarely need to visit that anyway.

Very well. Thanks.

Hello, I was looking at implementing SuperTokens on my webapp, is it also possible to authenticate with an android app? Thanks