Back
Are the GraphQL session docs up to date?
I am trying to create an emailPassword session with graphql (SSR) and I do not receive a secret. Just an ID
TypeScript
graphql.mutation({
query: `mutation (
$email: String!,
$password: String!,
) {
accountCreateEmailPasswordSession(
email: $email,
password: $password,
) {
_id,
secret
}
}`,
variables: {
email: fields.email,
password: fields.password,
},
})
This is what I get in the log from the request.
I get an _id but an empty secret
TL;DR
Developers are questioning if the GraphQL session docs are up to date, as there seems to be an issue with the ID and secret correlation. When attempting to set a cookie with the secret and retrieve an account, a permission error occurs. The request for an emailPassword session is returning an empty secret.To me in the docs it looks like id === secret, but if I use the secret to set a cookie and use this cookie to retrieve an account, I get a permission error, stating that the account is a guest, even though it's using a emailPassword session secret (id?)?
