rp_st
04/16/2021, 1:12 PMsupertokens-node (v4.3.0):
- Added a method for optionally doing session verification on a per API basis (docs: https://supertokens.io/docs/session/common-customizations/sessions/session-verification#optionally-verify-a-session)
supertokens-auth-react (v0.9.0) (breaking change because of breaking changes in supertokens-website):
- When using an auth wrapper around your route components, it now provides a session context to all the children components which makes it easy for them to get session information (docs: https://supertokens.io/docs/session/common-customizations/sessions/user-information-front-end)
supertokens-website (v6.0.0) (breaking change) - this is also used within supertokens-auth-react:
- Bypassing cookies (that are set on the frontend set) restriction imposed by browsers like safari and brave - they capped cookie lifetime to 7 days, preventing sessions to be active for more than 7 days. We bypassed this by using localstorage instead (note that we still use httpOnly cookies for access and refresh tokens, so there is no compromise in security).
- (breaking change): getUserId and doesSessionExist now return Promises
I urge everyone to use the latest versions of the frontend SDK so that they their session lifetimes are not restricted by the browser's limitation.