Hey guys did the implementation of sessionRequired change in

Question

Hey guys did the implementation of sessionRequired change in supertokens node 9 2 0 Even though I had set it to false it now throws a 401 Unauthorized for public routes `return await verifySession sessionRequired false ctx req as any ctx res as any next `

rp · Answer

Huh that s weird Nothing has changed regarding this

rp · Answer

Have you tried a previous version and that worked

nadilas · Answer

Mhm good point not yet It was working up until the today

rp · Answer

Can you enable debug logs and show me the output

nadilas · Answer

I ll try downgrading one minor It s not a blocking point I just moved the middleware logic one layer down to my protected routes now it can actually check with sessionRequired true but still I thought it was weird

nadilas · Answer

Sure let me move things back

nadilas · Answer

How do you enable debug logs again

rp · Answer

Add env var like DEBUG=com supertokens node index js

nadilas · Answer

One sec

nadilas · Answer

So your explanation tells me even though a session is not required per my parameter having an expired access token present in the call causes the verification to fail

rp · Answer

Yes Cause technically the session does exist The user is still logged in

nadilas · Answer

Oooooh

nadilas · Answer

So if I clean the cookies the public route will work again having no expired token and no active session

nadilas · Answer

It was a hypothetical question it of course means that and it does work

rp · Answer

Their refresh token is still valid

rp · Answer

So it just needs session refreshing

rp · Answer

Yup If you clear just the sIdRefresh cookie it will not return a 401

nadilas · Answer

I was supposed to be after a logout but on local dev I probably messed up the states or restarts and got stuck

rp · Answer

Yeaaaa That s possible

nadilas · Answer

I guarded the app with `sessionRecipe doesSessionExist ` which was false so I was routed to the login page and that s when the error occured

nadilas · Answer

is there a helper method or maybe signout I can call for easy cleanup of the cookies if `sessionRecipe doesSessionExist ` returns false

rp · Answer

I see Yea State is messed up

rp · Answer

Well The state you somehow reached shouldn t be possible unless manually cookies are cleared incorrectly

rp · Answer

So there isn t such a helper

nadilas · Answer

Right if this state cannot happen on prod then I m fine I know now how to get out of it

nadilas · Answer

thanks