Trying to make a request to my backend but getting back unauthorized. I understand cookies are sent ...

pepegc

03/30/2022, 4:56 PM

Trying to make a request to my backend but getting back unauthorized. I understand cookies are sent automatically? I previously successfully received the cookies in the response headers of

signup/code/consume

. Also using

'Access-Control-Allow-Credentials': true

on my request to the backend. What am I missing? After receiving the cookies from

signup/code/consume

I should see the cookies on dev tools>storage>cookies, correct? because I don't. Btw, I'm using

fetch

, not

axios

rp_st

03/30/2022, 5:15 PM

Trying to make a request to my backend but getting back unauthorized. I understand cookies are sent automatically? I previously successfully received the cookies in the response headers of

signup/code/consume

. Also using

'Access-Control-Allow-Credentials': true

on my request to the backend. What am I missing? After receiving the cookies from

signup/code/consume

I should see the cookies on dev tools>storage>cookies, correct? because I don't. Btw, I'm using

fetch

, not

axios

rp_st

03/30/2022, 5:15 PM

Can I see the request headers of the API call?

pepegc

03/30/2022, 5:16 PM

rp_st

03/30/2022, 5:16 PM

No cookies are being sent. Nor is interception happening

rp_st

03/30/2022, 5:16 PM

What’s the domain you are querying? And what is the appInfo object set to on the frontend and backend?

pepegc

03/30/2022, 5:18 PM

I'm querying from my frontend at

https://localhost:3000/

my backend (FastAPI) at

https://acheron-api.herokuapp.com/

rp_st

03/30/2022, 5:18 PM

Https? And not http?

rp_st

03/30/2022, 5:18 PM

What’s ur appInfo object?

pepegc

03/30/2022, 5:19 PM

both https... I'm not doing anything to appInfo on the frontend

pepegc

03/30/2022, 5:19 PM

on the backend I'm loading standard values

pepegc

03/30/2022, 5:19 PM

pepegc

03/30/2022, 5:20 PM

from an .env...

rp_st

03/30/2022, 5:20 PM

So on the frontend, what’s your apiDomain value?

rp_st

03/30/2022, 5:20 PM

And what are the .env values for the above?

pepegc

03/30/2022, 5:21 PM

pepegc

03/30/2022, 5:21 PM

those are fine, if I take out the validation at the backend api I get the resposne

pepegc

03/30/2022, 5:22 PM

I think this is the culprit, but idk how to send them

rp_st

03/30/2022, 5:27 PM

Are you calling supertokens.init before using

fetch

? Are you using

node-fetch

or the browser's inbuilt fetch?

rp_st

03/30/2022, 5:27 PM

What are the response headers in the sign in API?

pepegc

03/30/2022, 5:28 PM

yes, and no. it's sveltekit's fetch.. but just normal fetch for this matter

rp_st

03/30/2022, 5:29 PM

I mean, are you importing fetch from somewhere and using that?

rp_st

03/30/2022, 5:29 PM

Cause i don't think that will work. On the client side, you should use

window.fetch

pepegc

03/30/2022, 5:33 PM

I'm not importing fetch.. I'm using the default one on a .js file

rp_st

03/30/2022, 5:33 PM

Hmmm

pepegc

03/30/2022, 5:33 PM

now not sure what I did but I'm no longer getting the sign response, recognize the reason for this error?

pepegc

03/30/2022, 5:33 PM

rp_st

03/30/2022, 5:34 PM

That’s probably an error in how you are sending email / sms. The callback function you implemented is throwing that error

pepegc

03/30/2022, 5:36 PM

yea I think I have it, 1 sec, rebuilding

pepegc

03/30/2022, 5:38 PM

rp_st

03/30/2022, 5:39 PM

Ok. This seems fine

pepegc

03/30/2022, 5:39 PM

now it's working, had a retard 'await' while requesting the email in the backend. See? I'm getting the cookies

pepegc

03/30/2022, 5:39 PM

pepegc

03/30/2022, 5:39 PM

but they are not 'sticking'

rp_st

03/30/2022, 5:40 PM

So two things: - The cookies are attached to the api domain, but you are viewing the website domain's cookie store. - Im sure that the interceeptors are not being applied to

fetch

and thats' why things are not working

pepegc

03/30/2022, 5:40 PM

pepegc

03/30/2022, 5:41 PM

ignore the 'token' there

rp_st

03/30/2022, 5:41 PM

In the

.then

of fetch, can you call

await supertokens.doesSessionExist()

rp_st

03/30/2022, 5:41 PM

And see what that prints out

pepegc

03/30/2022, 5:51 PM

I can't use it there, it says SuperTokens is undefined. that's a

api.js

utility

rp_st

03/30/2022, 5:51 PM

Right. Are you calling supertokens.init on the frontend?

pepegc

03/30/2022, 5:52 PM

yes.. I'm calling it on the layout file for all routes

rp_st

03/30/2022, 5:52 PM

So this fetch, is it called on server side or client side?

pepegc

03/30/2022, 5:52 PM

client side, on mount

rp_st

03/30/2022, 5:53 PM

Cause if it’s the client side, you can import supertokens from supertokens-website and call that function in the .then

pepegc

03/30/2022, 5:53 PM

SuperTokens is init'd client side, on mount

rp_st

03/30/2022, 5:56 PM

Right. So you should be able to call supertokens.doesSessionExist in the .then of the fetch?

pepegc

03/30/2022, 5:59 PM

it's returning false

pepegc

03/30/2022, 5:59 PM

tested it somewhere else

pepegc

03/30/2022, 6:00 PM

after signin and getting something like this

rp_st

03/30/2022, 6:02 PM

Are you sure that supertoeks.init is being called before calling fetch?

rp_st

03/30/2022, 6:02 PM

Maybe it would be a good idea to get on a call to debug this

pepegc

03/30/2022, 6:03 PM

yes I even tried to initing right before the fetch

pepegc

03/30/2022, 6:03 PM

pepegc

03/30/2022, 6:04 PM

happy to get on a call, I'm super lost with frontend dev and I think sveltekit, despite all its magic, might be making things harder

rp_st

03/30/2022, 6:04 PM

Yeaaaa. Fair. Can you please book a slot using the link on our site

rp_st

03/30/2022, 6:04 PM

On the landing page, you can find the link with “consult an expert”

pepegc

03/30/2022, 6:06 PM

yes, but damn the soonest is tmrw at 2pm

pepegc

03/30/2022, 6:07 PM

(local)

rp_st

03/30/2022, 6:07 PM

Well. Yeaaa.

pepegc

03/30/2022, 6:07 PM

will take that one, thanks 😄

pepegc

03/30/2022, 6:11 PM

took the one at my 5am

pepegc

03/30/2022, 6:11 PM

https://tenor.com/view/always-ready-gif-14315684

rp_st

03/30/2022, 6:14 PM

Oh wow.

7 Views

Previous Next

SuperTokens.com

SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).