fix: refresh loop in axios interceptor (#123)

supertokens · May 24, 2024 · 581a2cd · 581a2cd
1 parent a0570a9
commit 581a2cd
Show file tree

Hide file tree

Showing 8 changed files with 17 additions and 9 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [unreleased]
 
+## [5.0.1] - 2024-05-24
+
+### Fixes
+
+- Fix a possible refresh loop in the axios interceptor
+
 ## [5.0.0] - 2024-05-08
 
 ### Breaking changes

diff --git a/lib/build/axios.js b/lib/build/axios.js
diff --git a/lib/build/version.d.ts b/lib/build/version.d.ts
diff --git a/lib/build/version.js b/lib/build/version.js
diff --git a/lib/ts/axios.ts b/lib/ts/axios.ts
@@ -498,6 +498,7 @@ async function setAuthorizationHeaderIfRequired(requestConfig: AxiosRequestConfi
                 ...requestConfig.headers,
                 Authorization: `Bearer ${accessToken}`
             };
+            (requestConfig as any).__supertokensAddedAuthHeader = true;
         }
     } else {
         logDebugMessage("setAuthorizationHeaderIfRequired: token for header based auth not found");
@@ -510,7 +511,7 @@ async function removeAuthHeaderIfMatchesLocalToken(config: AxiosRequestConfig) {
     const authHeader = config.headers!.Authorization || config.headers!.authorization;
 
     if (accessToken !== undefined && refreshToken !== undefined) {
-        if (authHeader === `Bearer ${accessToken}`) {
+        if (authHeader === `Bearer ${accessToken}` || "__supertokensAddedAuthHeader" in config) {
             // We are ignoring the Authorization header set by the user in this case, because it would cause issues
             // If we do not ignore this, then this header would be used even if the request is being retried after a refresh, even though it contains an outdated access token.
             // This causes an infinite refresh loop.

diff --git a/lib/ts/version.ts b/lib/ts/version.ts
@@ -12,6 +12,6 @@
  * License for the specific language governing permissions and limitations
  * under the License.
  */
-export const package_version = "5.0.0";
+export const package_version = "5.0.1";
 
 export const supported_fdi = ["1.16", "1.17", "1.18", "1.19"];
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "supertokens-react-native",
-  "version": "5.0.0",
+  "version": "5.0.1",
   "description": "React Native SDK for SuperTokens",
   "main": "index.js",
   "scripts": {