[SOLVED] Checking the Validity of Session Token

Moralis General
#1

Iā€™m able to get the session token for a particular user. Now, Iā€™m sending this ā€œsessionTokenā€ to the backend where it will check if the session token that is sent is a valid one or not. How can I achieve this?

Referred to other similar threads but didnā€™t get any solution.

#2

you query the session table from the server and compare with what is on server, you will need to use master key, as an alternative you can also connect directly to mongo db to read data from that session table

#3

I went with the first option - Querying the session table and comparing it.

But Iā€™m facing problem in the backend. When I do a query like this,

async function verifysessiontoken(sessionToken) {
  await Moralis.start({ serverUrl, appId, masterKey });
  const query = new Moralis.Query("_Session")
  const results = await query.find({useMasterKey:true});
  console.log('SESSION RESULT: ', results)
  return results
}

The query successfully returns the data like this in the backend - (Canā€™t find session token anywhere)

image
image418Ɨ551 4.09 KB

Whereas in the frontend it shows the data that I expect -

image
image908Ɨ688 74.8 KB

Why is that the same response shows differently in backend console and frontend console. I actually need just like the data shown in the frontend ( the session tokens and other stuffā€¦) in my backend to perform validation.

#4

try to access it directly, even if you donā€™t see it in that output

#5

Tried that but getting undefined as response. Any other way to access? If there is any documentation related to this, it would be very helpful.

#6

try something like this:

    query = new Moralis.Query("_Session");
    query.include("sessionToken")
    result = query.find({useMasterKey:true})
    result.then(
      function(value) {
        value.forEach((a) => console.log(a.get('sessionToken')));
      },
      function(error) {console.log(error);}
    );
1 Like
#7

Thanks a lot. It workedā€¦!! But using .then didnā€™t work for me. It threw an error. So I tried with a.get('sessionToken') and it worked as expected.

1 Like