sIRTFrontend

remove

http://localhost:8000

http://localhost:8080

js
VITE_API_URL=http://localhost:8000
VITE_API_BASEPATH=/api/v1/auth
VITE_WEB_URL=http://localhost:8080

js
const apiDomain = import.meta.env.VITE_API_URL;
const apiBasePath = import.meta.env.VITE_API_BASEPATH;

SuperTokens.init({
  appInfo: {
    appName: "Test",
    apiDomain,
    apiBasePath,
  },
  recipeList: [Session.init(), EmailPassword.init()],
  // enableDebugLogs: true,
});

python
SUPERTOKENS_URL = os.environ.get("SUPERTOKENS_URL", "http://localhost:3567")
SUPERTOKENS_API_KEY = os.environ.get("SUPERTOKENS_API_KEY", "someRandomKey")
SUPERTOKENS_WEBSITE_DOMAIN = os.environ.get(
    "SUPERTOKENS_WEBSITE_DOMAIN", "http://localhost:8080"
)
SUPERTOKENS_API_DOMAIN = os.environ.get(
    "SUPERTOKENS_API_DOMAIN", "http://localhost:8000"
)

python
supertokens_init(
    app_info=InputAppInfo(
        app_name="Test",
        api_domain=SUPERTOKENS_API_DOMAIN,
        website_domain=SUPERTOKENS_WEBSITE_DOMAIN,
        api_base_path="/api/v1/auth",  # Remember to set this on the frontend as well
    ),
    supertokens_config=SupertokensConfig(
        connection_uri=SUPERTOKENS_URL, api_key=SUPERTOKENS_API_KEY
    ),
    framework="fastapi",
    recipe_list=[
        st_session.init(),  # initializes session features
        st_emailpassword.init(),
        st_userroles.init(),
    ],
    mode="asgi",
)

python
com.supertokens {"t": "2022-08-17T16:52:03.231Z", "sdkVer": "0.10.2", "message": "middleware: Started", "file": "supertokens.py:394"}

com.supertokens {"t": "2022-08-17T16:52:03.231Z", "sdkVer": "0.10.2", "message": "middleware: requestRID is: session", "file": "supertokens.py:407"}

com.supertokens {"t": "2022-08-17T16:52:03.231Z", "sdkVer": "0.10.2", "message": "middleware: Checking recipe ID for match: session", "file": "supertokens.py:418"}

com.supertokens {"t": "2022-08-17T16:52:03.231Z", "sdkVer": "0.10.2", "message": "middleware: Matched with recipe ID: session", "file": "supertokens.py:440"}

com.supertokens {"t": "2022-08-17T16:52:03.231Z", "sdkVer": "0.10.2", "message": "middleware: Request being handled by recipe. ID is: /session/refresh", "file": "supertokens.py:452"}

com.supertokens {"t": "2022-08-17T16:52:03.232Z", "sdkVer": "0.10.2", "message": "refreshSession: Started", "file": "recipe/session/recipe_implementation.py:245"}

localhost:8000/api/v1/auth/session/refresh

Path=/

expose_headers=["X-Process-Time", "front-token", "id-refresh-token"],

CORSMiddleware

X-Process-Time

python
@app.middleware("http")
async def add_process_time_header(request: Request, call_next):
    start_time = time.time()
    response = await call_next(request)
    process_time = time.time() - start_time
    response.headers["X-Process-Time"] = str(round(process_time, 3))
    return response

Access control expose headers not set properly - which prevents frontend from reading the id-refresh-token, which prevents setting that state on the frontend.

expose_headers

expose_headers = ["*"]