https://supertokens.com/ logo
Channels
Powered by
#support-questions
missing cookies
# support-questions
z

ZeferiniX

04/15/2023, 2:28 PM
this is really baffling to me but maybe someone has an idea, I'm trying to move to ESM and all of a sudden, 
createNewSession
from the Recipe Session of the 
supertokens-node
SDK cannot set the cookies, not really sure what's going on I can see the sessions getting created in the table, but the cookies doesn't get set
r

rp

04/15/2023, 2:41 PM
hey @ZeferiniX which version of the SDK are you using?
z

ZeferiniX

04/15/2023, 2:41 PM
"supertokens-node": "13.4.1"
with docker image supertokens/supertokens-postgresql:4.6
r

rp

04/15/2023, 2:43 PM
right. When making the request to sign in, are you setting the 
st-auth-mode: "cookie"
header in the request?
our frontend SDK set's this by default, but in case you are not using our frontend SDK, or querying the API manually, then you need to set this header.
z

ZeferiniX

04/15/2023, 2:44 PM
r

rp

04/15/2023, 2:44 PM
by default the createNewSession function uses non cookie based session
so you need to set this header in the request and then it will set it in cookies instead
z

ZeferiniX

04/15/2023, 2:46 PM
let me try
oh that worked but it only sets the access token, I recall seeing a refresh token is this expected?
r

rp

04/15/2023, 2:58 PM
refresh token should also be set. See the response headers
z

ZeferiniX

04/15/2023, 2:59 PM
oh, so this wasn't related to ESM at all, my bad
r

rp

04/15/2023, 3:00 PM
yea
z

ZeferiniX

04/15/2023, 3:00 PM
I suppose the Frontend SDKs automatically grabs that but previously, the Backend SDKs sets these server-side
r

rp

04/15/2023, 3:00 PM
that happens now as well.
z

ZeferiniX

04/15/2023, 3:01 PM
well that's weird, I only see the access token in the cookie page of devtools
r

rp

04/15/2023, 3:01 PM
in the response headers?
to see the refresh token, you have to navigate to the refresh token path on your api domain
chrome deosn't show it otherwise
z

ZeferiniX

04/15/2023, 3:02 PM
it's in the response headers as well
oh
r

rp

04/15/2023, 3:03 PM
yup
z

ZeferiniX

04/15/2023, 3:03 PM
is this documented somewhere?
other than this, I couldn't figure this out xD
r

rp

04/15/2023, 3:06 PM
> is this documented somewhere? The migration? That's in the changelog of the SDKs on our github.
z

ZeferiniX

04/15/2023, 3:10 PM
no, the 
st-auth-mode
requirement and navigating to the refresh token path back in v12, the 
sAccessToken
and 
sRefreshToken
just gets set also checked the changelog and the initial impression I got was just simply passing the 
req
object as well in the 
createNewSession
https://github.com/supertokens/supertokens-node/blob/master/CHANGELOG.md#1300---2023-02-01
r

rp

04/15/2023, 3:12 PM
so in v12, the refresh token behaviour was the same (you had to navigate to the refresh path as well)
z

ZeferiniX

04/15/2023, 3:13 PM
we have a workaround in our local dev env backend where we expose a GET endpoint that automatically logs in a superadmin when it gets hit, the access and refresh tokens just gets set and seen in chrome dev tools but in v13, that's not the case anymore
thus the question
r

rp

04/15/2023, 3:13 PM
im quite sure that the refresh token behaviour is the same as before
the only diff is that now you need to set st-auth-mode header in the request (which our frontend sdk does on its own)
z

ZeferiniX

04/15/2023, 3:14 PM

https://cdn.discordapp.com/attachments/1096804291022438411/1096815916609708143/chrome_2023_04_15_231435387.gifâ–¾

from this GIF, I hit the GET endpoint and only the 
sAccessToken
gets set with the 
st-auth-mode
header set to cookie
in v12, both access and refresh tokens gets set
r

rp

04/15/2023, 3:15 PM
you need to navigate to the apidomain/auth/session/refresh on the browser and you will see the refreesh token
this is a chrome thing
not a supertokens thing
cause refresh token is being set. Chrome isn't showing it unless you navigate to the refresh path
you can try firefox instead and you will see
cause firefox shows all cookies for a domain regardless of the path
z

ZeferiniX

04/15/2023, 3:19 PM
ohh..

https://cdn.discordapp.com/attachments/1096804291022438411/1096817072933175296/image.pngâ–¾

that cookie has a path value now in v13 is what you meant
r

rp

04/15/2023, 3:20 PM
it used to have a path before as well
z

ZeferiniX

04/15/2023, 3:20 PM
wait really
r

rp

04/15/2023, 3:20 PM
again, this is a chrome thing..
yup
z

ZeferiniX

04/15/2023, 3:20 PM
damn
r

rp

04/15/2023, 3:20 PM
anyhow, hope this helped 🙂
z

ZeferiniX

04/15/2023, 3:21 PM
yeah I see it on firefox, welp, I'll look into this chrome quirk
thank you very much!
Powered by