rp_st
04/16/2021, 1:12 PMsupertokens-node (v4.3.0):
- Added a method for optionally doing session verification on a per API basis (docs: https://supertokens.io/docs/session/common-customizations/sessions/session-verification#optionally-verify-a-session)
supertokens-auth-react (v0.9.0) (breaking change because of breaking changes in supertokens-website):
- When using an auth wrapper around your route components, it now provides a session context to all the children components which makes it easy for them to get session information (docs: https://supertokens.io/docs/session/common-customizations/sessions/user-information-front-end)
supertokens-website (v6.0.0) (breaking change) - this is also used within supertokens-auth-react:
- Bypassing cookies (that are set on the frontend set) restriction imposed by browsers like safari and brave - they capped cookie lifetime to 7 days, preventing sessions to be active for more than 7 days. We bypassed this by using localstorage instead (note that we still use httpOnly cookies for access and refresh tokens, so there is no compromise in security).
- (breaking change): getUserId and doesSessionExist now return Promises
I urge everyone to use the latest versions of the frontend SDK so that they their session lifetimes are not restricted by the browser's limitation.SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).
Powered by