Hi there! I am integrating my appwrite cloud backend with FlutterFlow using REST. I can log in and use the X-Fallback-Cookies header with the session cookie to perform operations on the appwrite backend. However, looking at the docs, for the REST platform, all requests headers are authenticated with a JWT token - since these have a validity of just 15 minutes according to the docs, I would need to either stay with my current X-Fallback-Cookies implementation or retrieve new JWT tokens before every request. Even the JWT token retrieval is authenticated with the Fallback session cookie. I am afraid that with future updates the X-Fallback-Cookie method might stop working and I will get in trouble with my app. Any advice?
IMO your approach is fine for the time being. There's growing support for long-lived (custom expiry tume) JWTs which will probably be released in an update in the future. Basically, I don't think you have to worry about cookies being deprecated anytime soon. Take it with a grain of salt because I'm not on the core team
Recommended threads
- Request for JWKS Endpoint and OIDC Disco...
Hey Appwrite Team, Do you have plans to support JWKS and a well-known OIDC discovery endpoint? This would let us verify Appwrite JWTs in other services using st...
- Cloud 500 error
- CORS error
Local host working fine, production has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-O...