Hi ! I'm trying to get something like the enclosed diagram to work, I can't find a way to get the us...

demisel

01/31/2023, 5:47 PM

Hi ! I'm trying to get something like the enclosed diagram to work, I can't find a way to get the user id from the cookies set by supertokens, maybe this setup doesn't make sense ? I was thinking I'd be able to get an user id from the sAccessToken cookie, but I don't manage to verify its signature using the keys provided by the jwt recipe's get_jwks function ?

rp_st

01/31/2023, 5:56 PM

hey @demisel

rp_st

01/31/2023, 5:56 PM

the sAccessToken is not a JWT. To get the JWT, you should extract the jwt from the session on the frontend and send it to the backend for verification.

rp_st

01/31/2023, 5:56 PM

See our docs on session with JWT

demisel

01/31/2023, 5:58 PM

Alright, I was hoping to get rid of Authorization headers ! Thanks for the quick answer, have a nice day

rp_st

01/31/2023, 5:59 PM

in that case, you can use our verifySession function on the backend

rp_st

01/31/2023, 6:00 PM

and that will work with sAccessToken

rp_st

01/31/2023, 6:00 PM

but then you would have to init supertokens backend SDK in "other python services" as well - with the session recipe

demisel

01/31/2023, 6:02 PM

I think I'll keep using authorization headers rather than adding a dependency in all services

rp_st

01/31/2023, 6:03 PM

yea. Makes sense.

rp_st

01/31/2023, 6:03 PM

We are working on a change in which the sAccessToken is the JWT itself - in which case, the method you originally planned would just work (~1 month away)

demisel

01/31/2023, 6:04 PM

Great, looking forward to it !

Previous Next

SuperTokens.com

SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).