Skip to content

fix(session): treat secondary storage as stateful - #121

Draft
salasebas wants to merge 1 commit into
mainfrom
salasebas/parity-redis-01-cookie-cache
Draft

fix(session): treat secondary storage as stateful#121
salasebas wants to merge 1 commit into
mainfrom
salasebas/parity-redis-01-cookie-cache

Conversation

@salasebas

@salasebas salasebas commented Aug 20, 2026

Copy link
Copy Markdown
Owner

Summary

  • treat secondary storage as a server-backed session store when normalizing session defaults
  • preserve explicit cookie-cache opt-in while preventing implicit cached acceptance after revocation
  • add configuration and HTTP revocation regressions and clarify the stateless-session docs

Upstream parity

Matches Better Auth v1.6.23 (9dfceee14021fc15a2fb93023f39635f25b0b5ba), where hasServerSessionStore is true when either database or secondaryStorage is configured.

Checks

  • focused configuration tests: 31 runs, 136 assertions
  • focused session route tests: 44 runs, 260 assertions
  • full core suite: 1,545 runs, 9,421 assertions
  • StandardRB
  • docs parity check, format check, TypeScript lint, and production build
  • blind upstream-strict review: Approve

@salasebas
fix(session): treat secondary storage as stateful
24a05fc 
Apply stateless cookie-cache defaults only when neither a database nor secondary storage exists. This prevents revoked secondary-stored sessions from being served from an implicit cookie cache.
@vercel

vercel Bot commented Aug 20, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
better-auth Ignored Ignored Aug 20, 2026 8:09pm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

core docs

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@salasebas