Hello dear friends, I want to implement supertokens in my Next JS application (Passwordless with EMail). I have the following questions: - To check if a user is authenticated in Server Side Rendering, we use the function: getSession(). Does this function execute an internal API CALL or does it call a module function without HTTP request? - Are the user sessions stored in the database? Or does supertokens use JWT tokens? - Compared to NEXT AUTH, is supertokens more efficient?

Passwordless with NextJS

I'm using SuperTokens in my NextJS app. I'm using

doesSessionExist

and

isEmailVerified

from

supertokens-auth-react

to check on protected pages, if they do not have a session they get redirected and if the email is not verified they get redirected. My issue comes when I'm testing my pages with Cypress. Whenever Cypress loads up pages it fires off a request to

/auth/session/refresh

. If i just have Cypress set a cookie

sIRTFrontend: remove

it gets passed that request. But when It gets to my protected route wrapper and checks for

doesSessionExist

it will fail. My questions are: 1: How should we be mocking either a response for

/auth/session/refresh

or setting those cookies? 2: How should we be mocking the cookies so

doesSessionExist

actually returns true? As of now I can set some cookies for

doesSessionExist

with false data that just returns true but i cannot use that in conjunction with my solution for bypassing

/auth/session/refresh

@rp have an EmailPasswordSignUp_Override question regarding onChange event. I would like to post some code

Is there a way to restrict google sign-ins only to a single domain? for organisations or school mails. I am using supertoken with NestJs and Vue.

Restricting google login domains

Mocking of cookies for testing

sure. What is your question?

Any timeline on this merge to prod? We are ready to ship the supertokens auth refactor to our prodcution environment. We don't wanna switch from window.localStorage to Capacitor Storage, which will log out all our users... We rather wait till it's merged Thanks :D! https://github.com/supertokens/supertokens-web-js/pull/43

should be sometime this week. Probably tomorrow or day after.

Perfect! Then we will wait 😄

Hi folks, Does Supertokens support authorize 3rd-party applications. Auth0 provides a solution for this use case: https://auth0.com/docs/get-started/applications/dynamic-client-registration And there is nothing wrong with it, the only thing that take me back is that the Social Login is only available during trial and your solution is open source!

Hello ! I am looking for a solution to have a custom password validation according to a client. My first idea is to add a password formfield validate method (https://supertokens.com/docs/thirdpartyemailpassword/common-customizations/signup-form/field-validators#step-2-back-end-) But to do this i need to call an API inside the validate method with a clientId (so the front need to send this ID to the validate method), is there a way to do this? Thanks in advance for your help 🙂

Sorry, I have another question, we have looked into using your SAAS solution, however you only offer AWS and for RGPD / European law concerns we are forbidden to store user data in AWS (or any other american enterprise). Do you plan to propose other hosters? Thanks 🙂

Dear Supertokens support, We are using React + Next.js. Question - is it possible to sign in using Supertokens without rendering a corresponding form? F.x. using a function, something like

signIn(email, password)

called from within a component. Similarly to how you can use the

signOut()

function? Thanks a lot, BR, Yuriy

@rp good morning, regarding my question from earlier about , in my EmailPasswordSignUp_Override I'm trying to implement an

onChange

event. However, it's firing on a "blur" event.

Hey! Is it possible to override the internal supertoken redirection function? I am using NextJS and emailVerificationMode "REQUIRED". However my frontend is trying to check if the email is verified and redirect accordingly. I guess it uses the window.location.href thingy which is slow and inefficient compared to NextRouter...

Hello, is there a option to disable sign up and have only pre-seeded users, please? i am building backoffice service and i need only users that i created

disable sign up

hi i have a problem with passwordless auth in react. i want to call an api in the useEffect of APP.tsx but when i try i recive error 401, is it my bad ?

Hi I got this error, May I know how to solve it ?

If I only have 1 provider, is there a way to just go directly to that provider's authorization flow?

Does anyone know why axios goes into an infinite loop here when the request fails?

Infinite loop for axios

Hi Guys, I'm still having this undefined err, can't figure out why In my other apps we have the same flow, and it works 1. init in

_app.tsx

(nextjs app)

js
if (typeof window !== 'undefined') {
  supertokens.init({
    ...frontendConfig().appInfo,
  })
}

In our

Layout

component we initialize the user, by running a effect (which is client side) to

getUser()

in our zustand store

Hi Teams.

Is there an Elixir Backend SDK for supertokens?

Does supertokens use openapi ? if yes, Elixir SDK can be generated via cli. Please let me know.

I see there is new documentation for the email sending service, nice! But do I have to refactor my current custom email sending functions or will the "old way" continue to work? For reference, here is how I send Supertokens emails:

The old way will continue to work.