https://supertokens.com/ logo
Channels
Powered by
c

codingtomato

07/04/2022, 2:42 PM
Hey I have a issue with my capacitor ios app again. Here is the debug log from the phone. It logs in normally and cannot hold session somehow. Any ideas?
r

rp

07/04/2022, 2:44 PM
Hey! Do you mean refresh doesn’t work? Or app restart logs out the user? Or something else?
c

codingtomato

07/04/2022, 2:45 PM
So i log in ... that works.. after that I check with doesSessionExist() on every router navigation if the session exists
if not i redirect to the login page
I already had the issue some time ago but there i added a cookiehandler and it worked
r

rp

07/04/2022, 2:47 PM
So here doesSessionExist() returns false?
c

codingtomato

07/04/2022, 2:47 PM
After logging in this is the content from localStorage 
VELVET_FRONTEND_COOKIES    ["sIRTFrontend=remove;expires=Fri, 31 Dec 9999 23:59:59 GMT;path=/;samesite=lax","sFrontToken=;expires=Thu, 01 Jan 1970 00:00:01 GMT;path=/;samesite=lax"]
Probably wrong right?
yes
r

rp

07/04/2022, 2:48 PM
Yea. The content implies that no session exists.
Are you calling the api using axios?
I mean the login API
c

codingtomato

07/04/2022, 2:48 PM
no i use fetch
r

rp

07/04/2022, 2:49 PM
Hmm.
And supertokens init is called before making the request?
c

codingtomato

07/04/2022, 2:49 PM
Yes in my main.ts file
SuperTokens.init({ enableDebugLogs: true, apiDomain: HOST_URL, apiBasePath: "/auth", cookieHandler: getCookieHandler, // windowHandler: getWindowHandler, // Did the trick for electron // sessionScope: "localhost:5000", });
Like that (HOST_URL: http://192.168.198.34:5000)
I already tried with the window handler but that should only be necessary with electron, right?
without the slash... discord added it
is there a new version for the cookieHandler? I got it from the electron example
r

rp

07/04/2022, 2:53 PM
No. The cookie handler is still the same.
Are any of the functions in your cookie handler being called when you call the fetch API?
c

codingtomato

07/04/2022, 2:55 PM
I will take a look
Could you send me the cookieHandler example again?
r

rp

07/04/2022, 2:56 PM
c

codingtomato

07/04/2022, 2:56 PM
Yes they get called a bunch of times
r

rp

07/04/2022, 2:57 PM
Can you print out the input to the functions and paste it here?
c

codingtomato

07/04/2022, 2:57 PM
yes ... wait a second
is that ok?
Or do you want it together with the debug output?
just in case
r

rp

07/04/2022, 3:04 PM
So it seems that it’s being set properly initially, and then right after, the session is removed
c

codingtomato

07/04/2022, 3:04 PM
yes so akward
r

rp

07/04/2022, 3:06 PM
Can u check if the signOut api is called in the backend by any chance?
Or you can enable debug log on the backend and show me the output of that too when calling this API
c

codingtomato

07/04/2022, 3:09 PM
do i need to specify the cookiDomain?
just a second...
r

rp

07/04/2022, 3:10 PM
You don’t need to specify the cookieDomain
Right. So iOS is not sending the cookies to the backend and then subsequent requests are failing with an unauthorised error
c

codingtomato

07/04/2022, 3:14 PM
yes.... i dont understand why the cookies get deleted
r

rp

07/04/2022, 3:15 PM
iOS doesn’t send the cookies at all
What’s the apiDomian that you are using? And what’s the websiteDomain value?
c

codingtomato

07/04/2022, 3:15 PM
oh ok and because the refresh fails it delets the locally
r

rp

07/04/2022, 3:15 PM
On the frontend side
c

codingtomato

07/04/2022, 3:16 PM
You mean the backend init?
r

rp

07/04/2022, 3:16 PM
On the frontend init
What’s the apiDomain?
c

codingtomato

07/04/2022, 3:17 PM
r

rp

07/04/2022, 3:17 PM
Hmm. So on the backend, you should make it that as well.
c

codingtomato

07/04/2022, 3:17 PM
i set the websiteDomain to http://localhost:3000 ... is that the issue?
r

rp

07/04/2022, 3:18 PM
And u need to use https for the apiDomian, otherwise things won’t work.
Ok so basically, you need to set cookieSameSite as none on the backend, and use https to query the backend
c

codingtomato

07/04/2022, 3:19 PM
okay so https is the issue here?
r

rp

07/04/2022, 3:19 PM
Well, partly. You also need to set cookieSameSite to none on the backend
c

codingtomato

07/04/2022, 3:19 PM
okay... i will check that
thanks for your help
just 
cookieSameSite:"none"
in the init function?
r

rp

07/04/2022, 3:33 PM
In the session.init part
And you need to use https for the apiDomain and whilst querying the apiDomain as well
c

codingtomato

07/04/2022, 3:33 PM
you mean EmailPassword.init() ?
r

rp

07/04/2022, 3:34 PM
Session.init on the backend
c

codingtomato

07/04/2022, 3:34 PM
okay
But isnt the EmailPassword Recipe used for my login ?
I think i only used the Session Recipe for requesting a jwt token
r

rp

07/04/2022, 3:36 PM
EmailPassword creates a session using the Session recipe
And this is a setting related to the session. Hence in session.init
Hope this helps 🙂
c

codingtomato

07/04/2022, 3:37 PM
Ah okay thank you
I will try that tomorrow
3 Views
Powered by