Hooks File Not Creating a Session

[MattHeslington]

Hello,

First of all, sincere thanks for making this repository public! This code is so well documented, and looks so efficient, the best SvelteKit/Supabase auth code I've seen to be honest 👍🏻

There's just one small thing - I can't get the hooks.server.ts file to create a session, which results in the user being unable to view either /self or /app. I actually prefer to add authorisation on an ad hoc basis, which you also documented so well, but I'm just concerned as I'm sure this isn't how it's mean't to behave.

Initially I tried adding your code to an existing project, and when it didn't work as expected, I just cloned this repo and added my env details, but the same thing happens. I log in with GitHub - the user is shown in the header, but because there's no session coming from the hooks file, I'm unable to navigate.

const session = await event.locals.getSession()
console.log('hooks session', session)

Always logs "hooks session: null"

Anyway, thanks again for your work on this and making it public - much appreciated.
Cheers,
Matt

[j4w8n]

Thanks for checking out the repo Matt.

Can you add a console.log(err) to the catch section of the try-catch? I wonder if something is going wrong there.

[MattHeslington]

Hi,
Thanks for the reply! Yes, sure, I should have done that already.
Yep, there's a JWS error:

catch error JWSSignatureVerificationFailed: signature verification failed
    at flattenedVerify (file:///Users/Matt/Documents/WebApps/_SVELTEKIT_MOLECULES/TS-PERFECT-AUTH/node_modules/.pnpm/[email protected]/node_modules/jose/dist/node/esm/jws/flattened/verify.js:86:15)
    at async compactVerify (file:///Users/Matt/Documents/WebApps/_SVELTEKIT_MOLECULES/TS-PERFECT-AUTH/node_modules/.pnpm/[email protected]/node_modules/jose/dist/node/esm/jws/compact/verify.js:15:22)
    at async Module.jwtVerify (file:///Users/Matt/Documents/WebApps/_SVELTEKIT_MOLECULES/TS-PERFECT-AUTH/node_modules/.pnpm/[email protected]/node_modules/jose/dist/node/esm/jwt/verify.js:5:22)
    at async event.locals.getSession (/Users/Matt/Documents/WebApps/_SVELTEKIT_MOLECULES/TS-PERFECT-AUTH/src/hooks.server.ts:30:36)
    at async Object.handle (/Users/Matt/Documents/WebApps/_SVELTEKIT_MOLECULES/TS-PERFECT-AUTH/src/hooks.server.ts:60:19)
    at async Module.respond (/Users/Matt/Documents/WebApps/_SVELTEKIT_MOLECULES/TS-PERFECT-AUTH/node_modules/.pnpm/@[email protected]_@[email protected][email protected][email protected]/node_modules/@sveltejs/kit/src/runtime/server/respond.js:330:20)
    at async file:///Users/Matt/Documents/WebApps/_SVELTEKIT_MOLECULES/TS-PERFECT-AUTH/node_modules/.pnpm/@[email protected]_@[email protected][email protected][email protected]/node_modules/@sveltejs/kit/src/exports/vite/dev/index.js:524:22 {
  code: 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED'

I'm using the latest (I think) version of the repo, cloned yesterday, so using Jose.
I would try to help myself but I have very little knowledge, especially regarding JWT etc..
Cheers,
Matt

[MattHeslington]

I was just thinking. I first encountered this issue a couple of days ago, before you switched to Jose and were using JSONWebToken I think. I don't know if that helps narrow the problem down or not.

[j4w8n]

Have you double-checked your jwt secret in your env file, with what's in the dashboard?

[MattHeslington]

Oh man, I'm so sorry for wasting your time. I (I don't know why) just assumed that was something I egenerated myself using https://generate-secret.vercel.app/32 or something, similar to Auth.js or Lucia. I didn't even realise there was a JWT setting in the dashboard till you said.
Thanks for your help, and sorry for the time waste.
All the best,
Matt

[j4w8n]

Awesome! Glad it's resolved.