Hi there. Is it possible to have multiple supertokens cores for one application? I'm trying to cre...

kuzyaross

01/22/2023, 9:39 PM

Hi there. Is it possible to have multiple supertokens cores for one application? I'm trying to create one core for standard authorization with a small token validity period and one core for a mobile app, where the token will be valid for a long time. At a time I'm calling init ( from supertokens_python) when initialising my Django project . if I call init a second time with configs related to another supertokens core , will it work? I'm using Django btw

rp_st

01/23/2023, 2:46 AM

Hey @kuzyaross. This is not possible yet - the second init will be ignored.

rp_st

01/23/2023, 2:55 AM

Our sessions are based on inactivity time. So changing the access token lifetime doesn’t really matter if you want to change the session lifetime on a per client basis

rp_st

01/23/2023, 2:56 AM

You may want to override the refresh function in the session recipe to check how much time has passed since the last refresh, based on client type and if it’s more than a certain amount (for that client type), you can revoke the session and return a 401

kuzyaross

01/23/2023, 8:55 AM

Oh, i see. So should I override

async def refresh_session(recipe_implementation: RecipeImplementation, refresh_token: str, anti_csrf_token: Union[str, None], contains_custom_header: bool)

from

recipe.session.session_functions

async def refresh_session(self, request: BaseRequest, user_context: Dict[str, Any]) ‑> SessionContainer

from

supertokens_python.recipe.session.recipe_implementation

rp_st

01/23/2023, 8:55 AM

yup

rp_st

01/23/2023, 8:56 AM

in that, fist call the original implementation to get back the session object, then do what i mentioned in my previous comment

kuzyaross

01/23/2023, 8:57 AM

great, but how i get time when last refresh happened ? should i save this in my DB?

rp_st

01/23/2023, 9:07 AM

You can save this in the session data. So when the session is created, save this value, and when the session is refreshed, update this value in the session data object.

rp_st

01/23/2023, 9:08 AM

But you can also store in your own db where the key is sessionHandle

kuzyaross

01/23/2023, 10:54 AM

thanks a lot!!! appreciate it

Previous Next

SuperTokens.com

SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).