🛠️ Need Help: Supertokens + Multi-API + Rust Setup
Hey folks! I’ve got an app that talks to multiple APIs some written in Rust and uses a centralized auth server via Supertokens.
We support both cookie-based and JWT-based sessions. Recently, we’ve been hitting this error during token refresh and I can’t figure out the root cause:
> hook.js:608 The 'front-token' header is missing from a successful refresh-session response.
> The most likely causes are proxy settings (e.g.: 'front-token' missing from 'access-control-expose-headers' or a proxy stripping this header).
Here’s how our Supertokens session config looks at the auth server:
> Session.init({
> exposeAccessTokenToFrontendInCookieBasedAuth: true,
> cookieSecure: true,
> cookieDomain: COOKIE_DOMAIN,
> });
Has anyone dealt with this before? Any leads, especially around CORS headers, reverse proxy setup, or dealing with Rust APIs under Supertokens, would be hugely appreciated 🙏