https://supertokens.com/ logo
Channels
Powered by
d

doei

07/17/2022, 3:46 PM
Hi, I'm using a library for generating a typed api-client on my frontend (swagger-typescript-api), however it seems that the headers required by supertokens aren't set when using it. I don't understand why because the generated client uses fetch internally, which should be monkeypatched by supertokens (or so I understand) I also get an infinite loop of unauthorized requests. I am using the ThirdParty recipe. Do you know how I could fix this ?
r

rp

07/17/2022, 3:47 PM
Hey! Can you please enable frontend debug logs and show us the output of that during this sequence of API calls?
Also, it seems that the server refused the connection when the refresh API was called - can you call the refresh API manually via postman and see what happens?
d

doei

07/17/2022, 3:48 PM
thanks ! I will try the debug logs right now
there's a ton of output in there...
r

rp

07/17/2022, 3:53 PM
ok this looks fine. Can you enable backend logs and show me the output there?
d

doei

07/17/2022, 3:53 PM
everything does work when I don't use the generated client
okay !
Again, a lot of output
Here are the request headers
r

rp

07/17/2022, 3:58 PM
I see. So the browser is not sending the cookies.
Can you do the login request once and show me the response headers from it? Specifically, I want to see the set-cookie header
d

doei

07/17/2022, 4:00 PM
okay! thanks for your time again
r

rp

07/17/2022, 4:02 PM
hmm this is strange - why is the header being sent twice?
i mean each cookie header being sent twice
does this happen even when you don't use the auto generated code?
d

doei

07/17/2022, 4:03 PM
Well actually I've just tried to NOT use the generated client again, and indeed I still get an error
This is weird because I had everything working fine before (when using fetch directly)
The one difference I can think of right now is using typescript
r

rp

07/17/2022, 4:06 PM
hmm. What is the apiDomian and apiBasePath that you have provided? This is very strange
d

doei

07/17/2022, 4:07 PM
Copy code
apiDomain: "http://localhost:8081",
        websiteDomain: "http://localhost:8080",
        apiBasePath: "",
        websiteBasePath: "/auth",
r

rp

07/17/2022, 4:07 PM
Hmm. Can you make apiBasePath = 
"/"
and see if that helps?
d

doei

07/17/2022, 4:08 PM
I got the same error
r

rp

07/17/2022, 4:08 PM
how about making it 
/auth
?
d

doei

07/17/2022, 4:09 PM
oh my I'm sorry the last few errors were my bad
r

rp

07/17/2022, 4:09 PM
hmm
d

doei

07/17/2022, 4:09 PM
when using fetch directly I inputted the wrong path
r

rp

07/17/2022, 4:09 PM
right i see.
d

doei

07/17/2022, 4:09 PM
so anyway it IS working when not using the generated client
r

rp

07/17/2022, 4:10 PM
right. And when not using the generated client, what is the login request's response headers?
d

doei

07/17/2022, 4:10 PM
Here I'm using fetch directly in my code
in this message there's a screenshot of the same request but with the generated client https://discord.com/channels/603466164219281420/998254279401951302/998257137476178033
r

rp

07/17/2022, 4:11 PM
I think the generated code is making the fetch call with credentials header set to false.
which tells the browser to not send the cookies
d

doei

07/17/2022, 4:12 PM
Copy code
private baseApiParams: RequestParams = {
        credentials: "same-origin",
        headers: {},
        redirect: "follow",
        referrerPolicy: "no-referrer",
    }
those are the default options of the generated client
r

rp

07/17/2022, 4:13 PM
ahh i see. Can you remove the 
credentials: "same-origin",
part?
d

doei

07/17/2022, 4:13 PM
replace it with nothing ?
r

rp

07/17/2022, 4:14 PM
yes
just remove that key / value
d

doei

07/17/2022, 4:14 PM
that worked
thank you so much
r

rp

07/17/2022, 4:14 PM
cool!
d

doei

07/17/2022, 4:14 PM
thanks for taking the time with my problem again, so far I'm really liking supertokens btw
r

rp

07/17/2022, 4:14 PM
thank you :)) Happy to help
One more thing
the response headers that you are getting on login
it has set-cookie twice for each of the session tokens.
Which framework are you using on the backend?
d

doei

07/17/2022, 4:17 PM
fastify
r

rp

07/17/2022, 4:17 PM
Hmm. When you don't use the auto generated client, what does the set-cookie headers look like?
d

doei

07/17/2022, 4:18 PM
tbh I doubt that it will make a difference, because I'm only using the generated client after having logged in
I'll try though
r

rp

07/17/2022, 4:18 PM
yea i doubt too.. it may be an issue with our SDK setting the cookie headers for fastify
that's why im curious
d

doei

07/17/2022, 4:20 PM
yeah, I disabled the generated client but I think it's pretty much exactly the same as before
r

rp

07/17/2022, 4:20 PM
hmm ok thanks!
We will have a look at this.. it's odd.
But anyway, shouldn't affect the functionality.
d

doei

07/17/2022, 4:21 PM
indeed
gdluck with the debugging then
2 Views
Powered by