search

NamesMT / starter-fullstack

🔥Hono RPC, Nuxt, SST Ion, Kinde Auth, Tanstack Query, Shadcn, Primevue, UnoCSS
https://starter-fullstack.is-the.top
MIT License
28 stars 2 forks source link

Add a non-cookie session manager for different domains usecase. #9

Open NamesMT opened 4 months ago

NamesMT commented 4 months ago

Currently our session manager & authentication flow uses an automatic user detection based on session cookies with hono-sessions, this allows a super great DX working with APIs from the backend.

But chrome is phasing out 3rd-party cookies, we need to add another session manager to support usecases where we use different domains for the frontend and backend, maybe a Bearer JWT that contains the session id? Where would we store the session data?

NamesMT commented 4 months ago

I think I've implemented a very good base for a header-based session manager, it's still not fully finished though, you can see it and give your idea here: https://github.com/NamesMT/starter-fullstack/blob/main/apps/backend/src/middlewares/session.ts#L49