SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).

SuperTokens.com

Hey <@498057949541826571> also, my Request object in express doesnt have a .session key, so req.session is giving a typescript error

Amazing news about react native, starring now!

yea that's cause express's req object is not supposed to have any session object in it - so the typing will not allow for that.

You can  change the type of req to be `any`

<@498057949541826571> I did this instead incase anyone wanted another way 
```
  req: Request & { session: Session },
```

In my secureRoutesMiddleware above I do `req.session = session`, would it be secure to also do `req.currentUserId = session.getUserId()` or is it a security risk to use it in my code like this `if (req.currentUserId === 'foo'){ return 'bar' }` ?

But you could also just do req.session.getUserId(). This is super efficient cause it’s just reading from a variable in the session object.

Make a product called SuperTokens for web security. Specifically session management security