We add axios / fetch interceptors and when any of your API calls returns 440, we call the refresh API

the refresh API is a POST request to {apiDomain}/{apiBasePath}/session/refresh

So if you are implementing your own refresh route, you need to give it the route: {apiBasePath}/session/refresh

i see, so you cannot change that route?

and you also need to set

disableDefaultImplementation

to

false

> so you cannot change that route? You can't change the "/session/refresh" part of the route. But you can change the apiBasePath.. so if you set the apiBasePath to "/auth", then the refresh route becomes "/auth/session/refresh". If you set it to "/", then it becomes "/session/refresh"

fortunately the default value that's being used aligns with what i have

ok, thanks for clearing this all up

the default value of

apiBasePath

is

/auth

. So the default refresh API is

/auth/session/refresh

where can i find details of the default token expiration length?

Morning, I'm not sure if this has been reported, or if anyone else has run into this issue, but in order for my backend to respond to our client, I had to include the following headers in the cors list:

supertokens-sdk-version
supertokens-sdk-name

This was after integrating with superTokens in the front end and modifying the axios instance

any ideas why this might be the case?

I think you are using an older version of the frontend lib perhaps.. we used to send those headers earlier to maintain protocol versioning

If you update to a newer version, those are no longer sent.

I've verified that we are using v5 of the front end SDK

@User we had removed the above two headers from v5 onwards. I'm not sure how it's possible that those are still being sent.. Maybe there is some frontend client of yours that is somehow still using the older version?

the one on my machine right now is v4.3.0, however there are some pending changes that are using v5 my mistake

makes sense 🙂

Asked @User what he recommends for hosting supertokens on in terms of CPU/memory. He said 1 core / 1GB of RAM is enough

Thanks @User !

Yeah no problem

message has been deleted

Just signed up and I get an unauthorised error when submitting to the server…

Got this message when trying to refresh session

I'm in safari

you will need to provide more info

like the request headers that were sent

message has been deleted