Add idToken to TokenSet in SessionData

[tusharpandey13]

📋 Changes

Co-authored-by: kenkoooo kenkou.n@gmail.com
Added the field idToken in TokenSet type of SessionData allowing for easy access.

📎 References

• ID Token: OpenID Connect Core 1.0
• Auth0 - ID Tokens

🎯 Testing

PASSING

Test Files  9 passed (9)
      Tests  143 passed (143)
   Start at  15:39:48
   Duration  611ms (transform 351ms, setup 0ms, collect 969ms, tests 188ms, environment 1ms, prepare 414ms)

use the getSession() method to access tokenSet:

const session = await auth0.getSession();
const idToken = session.tokenSet.idToken;

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 76.19%. Comparing base (3caf259) to head (ca1b5c2).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1978      +/-   ##
==========================================
+ Coverage   76.16%   76.19%   +0.03%     
==========================================
  Files          21       21              
  Lines        1523     1525       +2     
  Branches      242      242              
==========================================
+ Hits         1160     1162       +2     
  Misses        356      356              
  Partials        7        7              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[kishore7snehil]

LGTM!

[arpit-jn]

LGTM

[ik-southpole]

Is there a way to opt-out from ID token being added to cookies?

From version v4.3.0, two cookies resulted in a larger size making some APIs failing with 431 Request Header Fields Too Large.

We will check if we can quickly switch to custom store. However, I would like to point out that update from v4.2.1 -> v4.3.0 broke our application because of ID token being added to the cookie resulting in the larger size that our APIs could not support.

[frederikprijck]

From version v4.3.0, two cookies resulted in a larger size making some APIs failing with 431 Request Header Fields Too Large.

What is the allowed size on your backend (which backend are you using?)? Things like node have a limit of 16KB.