Should getSession on the server allow update of token in jwt callback?

[simonbbyrne]

Your question
Does a call to getSession on the server return a stale token in the jwt callback? I'm experiencing similar to #371 (comment)
If I make the clientMaxAge small, I can get it to update. However, it would be not be very efficient. Greatly appreciate some advice on this please. I'm not sure if this is a bug.

This can be reproduced in the next-auth-example by adding the following to the jwt callback and click the Server page

    jwt: async (token) => {
      console.log("--jwt");
      if (!token) {
        return token;
      }

      console.log(token.test);

      if (!token.test) {
        token.test = 1;
        return token;
      }

      token.test = token.test + 1;

      return token;
    },
  },

Output:

--jwt
1
--jwt
1
--jwt
2
--jwt
2
--jwt
2
--jwt
2
--jwt
2
--jwt
2

What are you trying to do
Big picture - I'm trying to rotate access tokens after a short expiry. I'm using Auth0 provider and storing the roles/permissions in the access token which are passed to API to authorize. Without a rotation I can't update the roles/permissions in timely manner.

Feedback
Documentation refers to searching through online documentation, code comments and issue history. The example project refers to next-auth-example.

• Found the documentation helpful
• Found documentation but was incomplete
• [x ] Could not find relevant documentation
• Found the example project helpful
• Did not find the example project helpful

[simonbbyrne]

Can anyone help with this question please

[stale]

Hi there! It looks like this issue hasn't had any activity for a while. It will be closed if no further activity occurs. If you think your issue is still relevant, feel free to comment on it to keep ot open. Thanks!

[stale]

Hi there! It looks like this issue hasn't had any activity for a while. To keep things tidy, I am going to close this issue for now. If you think your issue is still relevant, just leave a comment and I will reopen it. (Read more at #912) Thanks!