Changing access token cookie path

Question

node js + koa What is the proper way if any to not to set sAccessToken cookie but still have refresh token cookie Or maybe to just modify it s path now it s not configurable as I can see Reason we use API Gateway and JWT token but we still use refresh endpoint with a cookie So there is no need to send access token cookie with every request everywhere except some endpoints All the other API endpoints are handled by API Gateway and JWT in header

vyobukhov · Answer

P S header only is not that good since as mentioned in the docs we loose refresh token httponly cookie

rp · Answer

which backend framework are you using

vyobukhov · Answer

node

rp · Answer

express

rp · Answer

or some other

vyobukhov · Answer

Sry koa added it to the question

rp · Answer

I think with koa you can add your own middleware which wraps all other middlewares and apis this way https stackoverflow com questions 31828528 how to make a middleware based on koa which is used for intercept http response In your middleware after yield next you can get the response and manually modify the access token cookie s path to what you want

rp · Answer

im not entirely sure if that works cause if your API sends the response before it gives control back to your middleware then it won t work

vyobukhov · Answer

Thx yeah middleware was my initial option but thought there is a way to it with supertokens itself

rp · Answer

actually the middleware approach probably won t work cause our middelware sends a response itself

rp · Answer

what you could do is to create your own base response object like this https github com supertokens supertokens node blob master lib ts framework koa framework ts L96 And then in the `setCookie` function set the path you want if the `key` is `sAccessToken` Then whenever you call getSession verifySession you can pass your custom implementation of the base response to it instead of passing the `ctx` directly For the middleware you can make your own middleware copy this code here https github com supertokens supertokens node blob master lib ts framework koa framework ts L179 and then change the `let response = new KoaResponse ctx ` line to just wrap ctx with your custom `KoaResponse` impl

vyobukhov · Answer

thx Will try

rp · Answer

Finally the last method could be to just fork our repo and make the change here https github com supertokens supertokens node blob master lib ts recipe session cookieAndHeaders ts L170

vyobukhov · Answer

I can prepare PR with adding this option to the config file if you are ok with it

rp · Answer

yea sure we would be willing to merge that in