Hey, is it possible to use the same SuperTokens co...
# generalo
Ollie.
12/29/2022, 8:41 AMHey, is it possible to use the same SuperTokens core for 2 different sites eg. billing.mycoolsite.com and admin.mycoolsite.com
r
rp_st
12/29/2022, 9:00 AMhey @Ollie.
r
rp_st
12/29/2022, 9:01 AMyes this is possible. Do you want different login UIs for each of the sub domains? Do each of the sub domains have their own backend?
o
Ollie.
12/29/2022, 9:03 AMI was hoping to use the same backend (an express server) with different custom UI's
r
rp_st
12/29/2022, 9:04 AMright. And if a user logs into one of the sub domains, their session remains specific to that sub domain?
o
Ollie.
12/29/2022, 9:04 AMIf thats possible then yes
Ollie.
12/29/2022, 9:05 AMOne sub domain is a client billing panel / store area and the other will be an admin/support agent dashboard.
r
rp_st
12/29/2022, 9:06 AMthis is possible yea. What you want to do is to set the website domain value on the backend to
mycoolsite.comrp_st
12/29/2022, 9:06 AMWhich recipe are you using?
o
Ollie.
12/29/2022, 9:07 AMWell the client area will use Email and password + social and the admin side just email and password, but I can just use Email and social on both and not show the social buttons on the admin side
r
rp_st
12/29/2022, 9:11 AMthat works.
rp_st
12/29/2022, 9:12 AMWhat you will need to do finally is to override the sendEmail function in emailDelivery config to change the domain of the reset password link based on the origin in the request header.
rp_st
12/29/2022, 9:12 AMother than that, it should just work
o
Ollie.
12/30/2022, 10:31 PM@rp_st following on with this, is it possible to reject sign in for users on the admin subdomain if they don't have a role (but still allow them to sign into the billing subdomain)
r
rp_st
12/31/2022, 5:25 AMyes. You can do this via overrides. Override the sign in recipe function and call the original impl first. If that succeeds, then check the request origin to see if its admin sub domain. If it is, and the user doesn't have the right role, then throw an error.
o
Ollie.
12/31/2022, 7:24 AMPerfect! Thanks for your help.
3 Views