fix: Failing supertokens-website frontendIntegration tests

Author: KShivendu

supertokens_python/recipe/session/with_jwt/recipe_implementation.py

@@ -156,7 +156,7 @@ async def jwt_aware_update_access_token_payload(
             jwt=existing_jwt, options={"verify_signature": False, "verify_exp": False}
         )
 
-        if decoded_payload is None:
+        if decoded_payload is None or decoded_payload.get("exp") is None:
             raise Exception("Error reading JWT from session")
 
         jwt_expiry = 1

supertokens_python/recipe/session/with_jwt/session_class.py

@@ -67,7 +67,7 @@ async def update_access_token_payload(
             jwt=existing_jwt, options={"verify_signature": False, "verify_exp": False}
         )
 
-        if decoded_payload is None:
+        if decoded_payload is None or decoded_payload.get("exp") is None:
             raise Exception("Error reading JWT from session")
 
         jwt_expiry = 1

tests/frontendIntegration/django2x/mysite/settings.py

@@ -51,11 +51,12 @@
     "PUT",
 ]
 
-CORS_ALLOW_HEADERS: List[str] = list(default_headers) + [  # type: ignore
+CORS_ALLOW_HEADERS: List[str] = list(default_headers) + [
     "Content-Type",
     "rid",
     "fdi-version",
     "anti-csrf",
+    "st-auth-mode",
 ]
 
 # Application definition

tests/frontendIntegration/django2x/polls/views.py

@@ -20,6 +20,8 @@
 
 from django.http import HttpRequest, HttpResponse, JsonResponse
 from django.shortcuts import render
+from django.conf import settings
+from supertokens_python import get_all_cors_headers
 from supertokens_python import InputAppInfo, Supertokens, SupertokensConfig, init
 from supertokens_python.framework import BaseRequest, BaseResponse
 from supertokens_python.recipe import session
@@ -309,6 +311,9 @@ def config(
             telemetry=False,
         )
 
+    for header in get_all_cors_headers():
+        assert header in settings.CORS_ALLOW_HEADERS
+
 
 config(True, False, None)
 

tests/frontendIntegration/django3x/mysite/settings.py

@@ -50,11 +50,12 @@
     "PUT",
 ]
 
-CORS_ALLOW_HEADERS: List[str] = list(default_headers) + [  # type: ignore
+CORS_ALLOW_HEADERS: List[str] = list(default_headers) + [
     "Content-Type",
     "rid",
     "fdi-version",
     "anti-csrf",
+    "st-auth-mode",
 ]
 
 # Application definition

tests/frontendIntegration/django3x/polls/views.py

@@ -25,6 +25,8 @@
 
 from django.http import HttpRequest, HttpResponse, JsonResponse
 from django.shortcuts import render
+from django.conf import settings
+from supertokens_python import get_all_cors_headers
 from supertokens_python import InputAppInfo, Supertokens, SupertokensConfig, init
 from supertokens_python.framework import BaseRequest, BaseResponse
 from supertokens_python.recipe import session
@@ -316,6 +318,9 @@ def config(
             telemetry=False,
         )
 
+    for header in get_all_cors_headers():
+        assert header in settings.CORS_ALLOW_HEADERS
+
 
 config(True, False, None)