1.0.X

This SDK documentation is outdated. Please do not refer to it, and instead visit the User Guides section.

@supertokens_middleware

  • This middleware function will verify sessions for all APIs that it is used in, except for:
    • OPTIONS and TRACE methods
    • refresh session API.
  • For refresh session API, it will call the refreshSession function.
  • It will use the getSession function to verify sessions.
  • If using @supertokens_middleware, then it will automatically provide anti-CSRF protection for all POST, PATCH, DELETE, PUT APIs.
  • If using @supertokens_middleware(False), then it will not provide anti CSRF protection for that API.
  • If using @supertokens_middleware(True), then it will provide anti CSRF protection for that API.
← set_relevant_headers_for_options_apiOverview →