in the session recovery example, potential error
application/api/auth.2/restore.js
({
access: 'public',
method: async ({ token }) => {
const restored = context.client.restoreSession(token);
if (restored) return { status: 'logged' };
const data = await api.auth.provider.readSession(token);
return { status: data ? 'logged' : 'not logged' };
},
});
If the token is not in sessions, we check it in the database, but after that we don't add it to sessions.
Example: context.client.startSession(token, data);
in the session recovery example, potential error
application/api/auth.2/restore.js
If the token is not in sessions, we check it in the database, but after that we don't add it to sessions.
Example: context.client.startSession(token, data);