replied in the issue @User

> How does using the session approach to managing user role differ from the approach that is soon to be added? @User We don't yet provide a way for you to define roles, associate them to users, add permissions etc.. but what we do have is that if you already have a role based system in place (associated with a user and permissions etc..), and want to associate a session with a role, we allow you to do that very easily.

> will it just included roles out of the box directly ? Yes.

How does Supertokens do Key management (rotation).. does it use any library?

We do it ourselves.

The way it works is that we create a new RSA key pair initially and keep track of when it was created. Let's say that a new key pair is supposed to be generated every 24 hours, so whilst the current key is lesser than 24 hours old, it will be used to create / verify session tokens. After 24 hours, the older keys will be thrown away and a new one will be generated. These new ones will be used to create new tokens, however, verification of old tokens will fail. For those old tokens, the user will fallback on using the refresh API to get a new JWT signed with a these newly generated RSA key pair - this means no user logouts.

And, these RSA tokens are stored in the db - the

key_value

table.

Got it. Thanks!

receiving below error after the setup #3(Nextjs) :: Unhandled Runtime Error Error: SuperTokens must be initialized before calling this method. What could I missing here

@User , you must call the supertokens.init (from the node SDK) in all your API functions that use any function to do with supertokens.

Hi, with supertokens Flutter, i am following the example but i am not quite sure how to login.. as for the example:

Future login() async { try { final response = await superTokensHttpClient.post(Uri.parse("$baseURL/login")); print(response.body); return; } catch (e) { throw e; } }

but no body, nothing? How this login works? Could not find this info on the api reference either

hey @User , which version of the core are you using? And what backend framework are you using? Also, apologies for the lack of docs for flutter.. it's in our backlog of todos

In general, the way the sessions works is that on the backend, you will have to integrate our SDK and use the

createNewSession

function in your login API. This function in turn will attach cookies to the response which the flutter interceptor will handle.

Oh i see, i´ll have to talk to the backend team then, lol.. thanks agains!

Hii everyone

hey!

Is anyone working on the backend authentication for django python

We are developing a python SDK at the moment.. should be a few weeks until it's ready for use.

Which recipe are you looking for?

Login

And social auth

login with email / password or social auth or both?

got it.

yea.. should be ready in about a month from now.

end of june

Is the repo available publicly

not yet.

But it should be available in 1 week.. (in WIP)