SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).

SuperTokens.com

Can I use supertokens session recipe, to store an oauth token that's not supposed to accessible by the client, but only by the server?

Use the sessionData payload to store the tokens.

But keep in mind that fetching the session data entails querying the db each time.

Alright, thanks a lot for the fast response!

<@498057949541826571> would every sessionData request count as a MAU for pricing?

Session data is just like access token payload, except that it’s not exposed to the frontend

<@498057949541826571> if my backend is express, is there a way to automatically cache the sessionData / would anything stand in the way of implementing the caching myself?

nothing would stand in the way if you want to impl caching yourslef.

You can implement caching based on the session's `sessionHandle`.