Hey, I have a website and a chrome extension. What...
# support-questions-legacyk
kumar_ayush
11/10/2022, 9:47 AMHey, I have a website and a chrome extension. What i want to do is when the user logins inside the website, he should automatically login inside the extension as well. This is a business project.
r
rp_st
11/10/2022, 9:50 AMhey @kumar_ayush we don't have good support for chrome extension at the moment.
The website login right now works using cookies attached to the api domain, im not sure if browsers allow such a case where cookies will be sent via extensions.
k
kumar_ayush
11/10/2022, 10:59 AMThere is a feature where the cookies can be read by the extension using the background script.
r
rp_st
11/10/2022, 11:00 AMi don;'t think httpOnly cookies will fall in that category
k
kumar_ayush
11/10/2022, 11:02 AMIf is send the cookie somehow will be able to authenticate
r
rp_st
11/10/2022, 11:03 AMwhat do you mean?
k
kumar_ayush
11/10/2022, 11:10 AMHey, I got the cookies. I used the api chrome.cookies.getAll
kumar_ayush
11/10/2022, 11:10 AMHere is the cookies which I got when provided the discord url.
r
rp_st
11/10/2022, 11:12 AMoh ok! but you need to get them for the api domain on which the supertokens cookies are attached
k
kumar_ayush
11/10/2022, 11:14 AMI will get but there was one problem, I think I might face.
kumar_ayush
11/10/2022, 11:15 AMOauth 2.0 will logout the user if it detects expired tokens, what will be the fix.
r
rp_st
11/10/2022, 11:20 AMyou mean if the acess token has expired?
rp_st
11/10/2022, 11:20 AMin that case, your backend will send back a 401, and you want to call the refresh API
k
kumar_ayush
11/10/2022, 11:31 AMNo, it is said in auth2.0 that if someone steals your tokens and try to login from another device. It will actually logout both the user. Won't this will happen when the extension will use the token, and a new refersh and access tokens will be issed.
r
rp_st
11/10/2022, 11:40 AMif the extension refreshes the session, the new tokens should be attached to the same API domain as the one that the website is querying (on the same browser) - so this shouldnt be an issue
k
kumar_ayush
11/10/2022, 11:42 AMOk I will implement this then get back to yout.
kumar_ayush
11/11/2022, 8:56 AMHey rp, the authentication works but when I close the browser the cookies are cleared.
r
rp_st
11/11/2022, 8:57 AMwhat is the cookie domain?
k
kumar_ayush
11/11/2022, 9:40 AM@Arne can you help
kumar_ayush
11/11/2022, 9:40 AMkumar_ayush
11/11/2022, 9:40 AMcookie domain
kumar_ayush
11/11/2022, 10:07 AMOk now i got it working. Actually I was reqeusting the cookie from discord.com. Now I am accessing from my own project which is hosted on netlify and uses supertokens on the backend.
27 Views