I am running NextJS with an Express API on a separ...
# support-questions-legacyr
robottonyc
11/18/2023, 9:59 PMI am running NextJS with an Express API on a separate server. Is there a way for me to get the user session inside getServerSideProps in my NextJS application? I have tried following the NextJS specific directions for getServerSideProps but it always comes back unauthorized. Any advice?
I'm thinking I need to use the SDK inside getServerSideProps which is fine but how do I get the user id or session id so I can check if they have a valid session? My goal is to redirect to a different page if the user is authenticated.
My api is running on api.example.com and app on app.example.com on my localhost by adjusting my etc/hosts.
I get a session on first page load after logging in, if I refresh the page then it fails with the UNAUTHORIZED error triggering an infinite refreshing loop.
r
rp_st
11/19/2023, 5:31 AMHey @robottonyc are you sharing the session across the sub domain?
rp_st
11/19/2023, 5:32 AMr
robottonyc
11/19/2023, 5:49 AMHi, yes I am. I have the cookieDomain set in the config of my express api instance, and the backendConfig of the nextjs instance
r
rp_st
11/19/2023, 5:51 AMRight. In that case, when you do a browser navigation, does the access token cookie get sent in the request?
r
robottonyc
11/19/2023, 5:54 AMI'm thinking not unless it is that ajs_anon one
robottonyc
11/19/2023, 5:54 AMbut all my api requests to the api server work
r
rp_st
11/19/2023, 5:54 AMHuh. That’s strange. GetServerSideProps is called during page navigation right?
rp_st
11/19/2023, 5:54 AMSo in that case, how do you have an authorization header?
r
robottonyc
11/19/2023, 5:55 AMoh sorry that was not on the page with getserversideprops
r
rp_st
11/19/2023, 5:55 AMRight. You are facing an issue with getServerSideProps right?
r
robottonyc
11/19/2023, 5:55 AMyes that is correct.
r
rp_st
11/19/2023, 5:55 AMI think I know the issue
rp_st
11/19/2023, 5:55 AMYou are using header based auth
rp_st
11/19/2023, 5:56 AMInstead, use cookie based auth
r
robottonyc
11/19/2023, 5:56 AMyes that is correct
r
rp_st
11/19/2023, 5:56 AMThat should fix the issue
r
robottonyc
11/19/2023, 5:56 AMI needed to switch to header based auth because I have an api that is shared by 2 tenants
r
rp_st
11/19/2023, 5:56 AMRighttt
r
robottonyc
11/19/2023, 5:56 AMI was running into interfering sessions
r
rp_st
11/19/2023, 5:56 AMSo this is a problem
rp_st
11/19/2023, 5:57 AMSo one solution could be
r
robottonyc
11/19/2023, 5:57 AMOkay, the SSR isn't critical to me right now, I was wanting to use it to redirect to a different page under certain circumstances.
r
rp_st
11/19/2023, 5:58 AMHmm
r
robottonyc
11/19/2023, 5:58 AMI can redirect client side
r
rp_st
11/19/2023, 5:58 AMI think the st-access-token cookie will be sent in the request during ssr right?
rp_st
11/19/2023, 5:58 AMCause that’s a frontend cookie that’s set for header based auth
rp_st
11/19/2023, 5:59 AMSo you could manually read that during ssr and pass that into getSessionWithoutRequestResponse function
r
robottonyc
11/19/2023, 5:59 AMlet me look for that in the req headers
robottonyc
11/19/2023, 6:00 AMyup I have st-access-token, sFrontToken and st-refresh-token
robottonyc
11/19/2023, 6:02 AMI'm just trying to track down documentation on the function
r
robottonyc
11/19/2023, 6:05 AMokay sweet yeah I tracked that down. Just trying to figure out what to put for the antiCssrfToken and options
robottonyc
11/19/2023, 6:07 AMoh those are optional args. BOOM that worked!
robottonyc
11/19/2023, 6:07 AMthank you so much!
r
rp_st
11/19/2023, 6:08 AM👍
r
robottonyc
11/19/2023, 6:08 AMFantastic support. I always try to bang my head against the wall for a couple days before I hang my head in shame. Thank you for getting me off the ground.
r
rp_st
11/19/2023, 6:09 AMHappy to help 🙂
2 Views