Also, have you called the supertokens.init function?

I have this on every page on top of all other js scripts

supertokens.init({
  appInfo: {
    appName: "...",
    apiDomain:
      "http://localhost:8080" /**Change it to your website domain where this project is deployed */,
    apiBasePath: "/api",
    onHandleEvent: (context) => {
      console.log("SuperTokens event received");
      if (context.action === "UNAUTHORISED") {
        console.log("Unauthorized access");
        alert("You are logged out. Will redirect to login screen.");
        window.location.replace("/auth?redirectToPath=" + location.pathname);
        // called when the user doesn't have a valid session but made a request that requires one
        // NOTE: This event can fire multiple times

        if (context.sessionExpiredOrRevoked) {
          // the sessionExpiredOrRevoked property is set to true if the current call cleared the session from storage
          // this happens only once, even if multiple tabs sharing the same session are open, making it useful for analytics purposes
        }
      }
    }
  },
    recipeList: [
        supertokensSession.init(),
        supertokensEmailPassword.init()
    ],
});

Just this one fails?

@nkshah2 can help.

We have identified the issue and are working on a fix

Change your script imports to be

<script src="https://cdn.jsdelivr.net/gh/supertokens/supertokens-web-js@0.1.3/bundle/website.js" />
<script src="https://cdn.jsdelivr.net/gh/supertokens/supertokens-web-js@0.1.3/bundle/supertokens.js" />
<script src="https://cdn.jsdelivr.net/gh/supertokens/supertokens-web-js@0.1.3/bundle/session.js" />
<script src="https://cdn.jsdelivr.net/gh/supertokens/supertokens-web-js@0.1.3/bundle/emailpassword.js" />

And see if that solves the issue. Note the version in the script URL is just to make sure that jsdelivr does not serve you a cached version (usually takes 24 hours for newer versions to reflect on their CDN)