How does the system send the right info in Bearer for auth?

Bishop · 2024-01-21T19:21:21.279+00:00

It's unclear where it gets its information, this video explains.

Bishop

1 year ago

It's unclear where it gets its information, this video explains.
Lucas G

1 year ago

toddle has some undocumented features for handling user session stuff automatically, it even has a logout endpoint that we can use
they'll document it at some point lol
Andreas would be a good person to answer this
Andreas Møller

1 year ago

You basically did everything right. But your access_token is currently just set to “access_token” when you set the session cookies
It should be the token you get from the server when you sign in
Lucas is right that these features are purely documented:)
Bishop

1 year ago

i see s basicaly this, but assuming i had entered the right info. It sounds like 'Access token' is a special cookie we don't need to be specific about
Bishop

1 year ago

there's nothing more to do here as long as Access token is assigned the returned data properly
Bishop

1 year ago

caught it
@Bishop
caught it
Lucas G

1 year ago

Make sure you also select that "auth_token" from the API data
So you pass in just the value and not the full object
Hope that makes sense
But yeah, that's all you have to do
Bishop

1 year ago

i see, not this
but this
👍1
Bishop

1 year ago

But then how do I detect if its set, elsewhere? I'm trying to put into the main app to show login if auth token isn't set and this doesn't do it, do i need to set an additional variable in order to detect if they are or aren't logged in?
Lucas G

1 year ago

Session storage is separate from session cookies
Lucas G

1 year ago

Just checking if it's set isn't the safest though since the token could be expired
I'm not sure if toddle automatically clears the cookie value on expiry
Lucas G

1 year ago

I imagine safest thing is just to do a session check to your backend
Bishop

1 year ago

ok so it sounds like 'dont worry about the cookie, just ask the back end to produce an error if auth fails'
and protect all the apis that have private info

How does the system send the right info in Bearer for auth?

Bishop

Lucas G

Andreas Møller

Bishop

Bishop

Bishop

Lucas G

Bishop

Bishop

Lucas G

Lucas G

Lucas G

Bishop