cherta
commented
3 years ago Not sure this comment helps, but I've been playing with a middleware to allow my backend (queries and mutations) to be consumed from a mobile application that cannot store cookie based sessions.
The main idea is to register a jwt middleware before the sessions middleware and create a session based on the JWT payload when requests comes from a mobile client.
When this middleware manages the request it creates a new session that complies with the Blitzjs session signature and calls next().
It's not by any means perfect, but so far is working, I need another week to polish the code and maybe I can post it here.
flybayer
zwl1619
ditorodev
What do you want and why?
Server-side sessions come with pros and cons. Some users prefer the tradeoffs/benefits provided by client-side sessions (e.g. JWT).
This also makes it easier to choose alternative data stores (such as those unsupported by Prisma) without having to modify the auth system.
Possible implementation(s)
Today database sessions are assumed. It would be nice to allow the user to select the session management style during project generation, then generate the project files accordingly.
Additional context