I am attempting to use anonymous sessions with the Node SDK but I have simply no idea how to persist the session to a cookie, pass it to the session client, etc. The returned session object from account.createAnonymousSession doesn't include a secret parameter like the other authentication methods do to be stored in a cookie.
Curiously, I tested how anonymous sessions worked in the browser SDK (since there is no manual session management involved) and I found that the lack of a secret parameter is the same. However, the session cookie comes directly from the request via a Set-Cookie header. I don't know how to intercept this header from the call in the server SDK to be able to store the session secret since the library does not make it accessible from what I can tell.
One of my thoughts was to manually make an API call from the Node side and proxying the Set-Cookie to the client, but it seems like there should be a better way to do this.
account.createAnonymousSession() returns the following object. I have changed the value of some of the fields containing PII.
Any help would be much appreciated!
{
"$id": "696c035d336054320f10",
"$createdAt": "2026-01-17T21:47:09.220+00:00",
"$updatedAt": "2026-01-17T21:47:09.220+00:00",
"userId": "696c035d27ec559cbc5e",
"expire": "2027-01-17T21:47:09.210+00:00",
"provider": "anonymous",
"providerUid": "",
"providerAccessToken": "",
"providerAccessTokenExpiry": "",
"providerRefreshToken": "",
"ip": "",
"osCode": "",
"osName": "",
"osVersion": "",
"clientType": "browser",
"clientCode": "CH",
"clientName": "Chrome",
"clientVersion": "143.0",
"clientEngine": "Blink",
"clientEngineVersion": "143.0.0.0",
"deviceName": "",
"deviceBrand": "",
"deviceModel": "",
"countryCode": "",
"countryName": "",
"current": true,
"factors": [
"anonymous"
],
"secret": "",
"mfaUpdatedAt": ""
}
Recommended threads
- Auth working for emulator but not for ph...
hey guys i'm using appwrite for expo react native it is working perfectly for emulator but does not working for physical devices can u explain any one and it is...
- Invalid Credentials to Log in
Hello team, I’m facing a login issue with appwrite this morning. I can’t login anymore. I haven’t changed or pushed anything since the last time I was able to l...
- Fine grained permissions for webRTC hand...
Hi, I am building a WebRTC P2P app for a university project and have hit a security limitation regarding permissions for anonymous users. The Architecture: We ...